Skip to main content
pnobels
New Member
Sep 24, 2024 5:41 PM UTC
Solved

missing APP and IPS filters when using cli

Hi,

 

i'm trying to use the cli in Forti Manager 7.0.12 to script a policy.

 

config firewall policy
edit 0
set name "test-policy"
set srcintf ZONE_LAN
set dstintf ZONE_LAN
set srcaddr test-1
set dstaddr TESTGRP
set service TCP_5000-6000
set action accept
set profile-protocol-options PROXY_FILTER
set ssl-ssh-profile SSL_FILTER_CERT
set ips-sensor IPS_FILTER
set application-list APP_FILTER
set inspection-mode flow
set internet-service disable
set nat disable
set logtraffic all
set schedule always
next
end
 
I can run this script successfully.  No errors.  However in the gui the policy does not contain the APP and IPS filters?

Any hint?

 

AEK
AEKAnswer
SuperUser
Sep 24, 2024 8:41 PM UTC

Hi

Can you try add "set utm-status enable"?

AEK

3 replies

AEK
SuperUser
AEKAnswer
SuperUser
Sep 24, 2024 8:41 PM UTC

Hi

Can you try add "set utm-status enable"?

AEK
johnathan
Staff
Staff
Sep 24, 2024 8:41 PM UTC

What is the FortiGate version? I can see that App Ctrl may be hidden on 7.6.0 unintentionally: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Application-control-not-visible-in-the-GUI/ta-p/329089

Regarding IPS, you probably just need to go to Feature Visibility and turn 'IPS' on. 

Never trust a computer you can't throw out a window.
pnobels
pnobelsAuthor
New Member
Sep 25, 2024 10:38 AM UTC

Hi,

 

adding "set utm-status enable" solves the issue.  Thx!

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT