Skip to main content
vladimircze
New Member
January 19, 2017
Question

Global interface mapping to multiple interfaces (5.2.9/10)

  • January 19, 2017
  • 0 replies
  • 2398 views

Hello,

 

We trying to create bit complex policy interface mapping using next condition:

 

we have site "A" where is LAN defined as interface "ABC"

we have site "B" where is LAN defined as zone "DEF"

we have site "C" where is LAN defined as mix of multiple interfaces and zones "int-A", "int-B", "zone-123"

 

everything working correctly, if we are speaking about "local" FortiManager rules. 

But we have to move these rules into global section, because these rules are common for all three sites.

 

It is possible to create interface mapping by our condition? in fact, as I understand, interface mapping is just macro, should expand to destination set. 

 

Anybody achieved something like described above target?

 

Thank you for your attention and have a nice day.

 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.