FortiOS 5.6.8 and Unable to add Multiple Interface in IPv4 Policy using GUI

Forum|Forum|7 years ago
March 20, 2019
1 reply
4765 views

Recently upgraded to said version.

Noticed that while creating a new policy using GUI, unable to see the '+' symbol while adding multiple interfaces (from/to). Also tried pressing ctrl button while doing the selection.

However, existing policies that have multiple interfaces remain.

So I tried using CLI and by comparing existing policies, able to use CLI to add the multiple interfaces. And this shows up on the GUI.

Hence, would like to confirm, whether is this a bug, or simply a removal of the existing feature.

Would upgrading to v6 bring this back?

Thanks for your time.

Best answer by ede_pfau

And why is it made a feature setting.

Because, if you use multiple interfaces in just one policy, you will lose the segmented policy view - segmentation by interface pairs isn't possible anymore then. This not only makes managing more cumbersome but debugging traffic flow will become more challenging then.

I would always try to avoid this. Explicit policies can be debugged and managed explicitely (think: byte counter), at the expense of a longer policy list.

hnmr

New Member

Have you enabled this feature in GUI?

config system settings

set gui-multiple-interface-policy enable

end

theArtiesAuthor

New Member

Thank you very much. How did I miss that. And why is it made a feature setting.

ede_pfauAnswer

SuperUser

And why is it made a feature setting.

Because, if you use multiple interfaces in just one policy, you will lose the segmented policy view - segmentation by interface pairs isn't possible anymore then. This not only makes managing more cumbersome but debugging traffic flow will become more challenging then.

I would always try to avoid this. Explicit policies can be debugged and managed explicitely (think: byte counter), at the expense of a longer policy list.

Sign up

Login with SSO

Login to the community

Login with SSO