New Member

Question

How to find highest policy id

Forum|Forum|3 years ago
September 22, 2022
5 replies
4363 views

How can I find a highest policy Id used on a vdom firewall policy? As they are not ordered in any particular way

FortiGate

kgeorge

Staff

Hello,

Greetings!

I believe, you would like to know which Policy would be having more weightage. If not, kindly explain your exact requirement.

Please be advised that, the Policy ID does not matter however the order does. The Policy on the top of the list take precedence and traffic matches down the list (Top to Bottom).

In order to know the Policy ID, you can add the Column called "ID" in Firewall Policy.

Have a nice day!

zsylammAuthor

New Member

Thanks Klint,

I am concerned more about the actual policy ID then about the order. However I am happy to follow some best practices in here. I am automating policy provisioning and I want to make sure that I use a new policy ID that is the highest currently used policyID +1.

The background is that I do have policies configured for given vdom in inconsistent way...

For example just a part of the output from show firewall policy

edit 1445

edit 1446

edit 200201

edit 200202

etc

Now when I create a new policy I want to be able to find the highest used policyID on that device/vdom and add 1 and use it for configuring the policy.

Is there a way to know the highest used policy ID?

Or maybe another way to handle it?

Maybe I can find in a simpler was the first available policy ID?

nilmoe

Visitor III

Hi,

on the FGT CLI you can create a new policy with the ID "0". This will always use a free ID slot in your policy set.

config firewall policy

edit 0

...

Hope this helps.

Regards

Nils

Sign up

Login with SSO

Login to the community

Login with SSO