Skip to main content
StevenT
Explorer II
June 9, 2023
Solved

Firewall policy arrange in sequence group

  • June 9, 2023
  • 2 replies
  • 4096 views

Anyone had try using this sequence group in the firewall policy via numbering order but the number we rearrange from the initial of 1,2,3,4,5,6 to become 1,2,3,5,4,6.

Does it follow the top-down approach or sequence id approach in sequence grouping once we rearrange the ID order?

 

Best answer by pavankr5

Hello @StevenT ,

 

In FortiGate firewalls, the firewall policies are typically evaluated based on the policy ID in ascending order. However, rearranging the policy IDs does not affect the evaluation order. The policy evaluation still follows the top-down approach, where the policies are processed from the top of the policy list to the bottom.

 

Thanks,

Pavan

2 replies

pavankr5
Staff
pavankr5Answer
Staff
June 9, 2023

Hello @StevenT ,

 

In FortiGate firewalls, the firewall policies are typically evaluated based on the policy ID in ascending order. However, rearranging the policy IDs does not affect the evaluation order. The policy evaluation still follows the top-down approach, where the policies are processed from the top of the policy list to the bottom.

 

Thanks,

Pavan

mgoswami
Staff
Staff
June 9, 2023

Hi,

 

Firewall examines the policies from top to bottom, based on the policy sequence number, until it finds the first matching policy. It doesn't depend on the policy ID.

 

Regards,

Manosh