Solved
interface zones
Good day all,
Using zones in our fortigate firewall. Is traffic within the same source & same destination zone allowed by default or it needs a rule in place?
Toshi_EsumiAnswer
SuperUser
Aug 7, 2020 2:51 PM UTC
If you want to control further, you can "set intrazone allow" for the zone then add policies to block some traffic, like blocking one direction int1->int2 while allowing the opposite direction int2->int1 inside the zone, with the same zone as its src and dst interface in the same policy. We recently needed to do that based on a customer's requirement.
