Skip to main content
acheron538
New Member
April 6, 2016
Question

Group with exclusion properties

  • April 6, 2016
  • 0 replies
  • 2650 views

@all,

 

I'm going to migrate a customer of ours from checkpoint to a fortigate cluster. A 3th party converted the checkpoint firewall-objects to the fortigate standard.We are now building the policy on the new fortigate cluster.

 

In the checkpoint firewall, there's a "overlapping" group called an exclusion group. In this group, all other groups are present and within this group you can exlcude (negate) a sub-group, and there's our problem.

 

The conversion to the fortigate standard made this a standard group and we would like to make this one the same as on the checkpoint. Is it possible on a Fortigate to create such a group?

 

With kind regards,

 

Johnny