Newbie on FortiOS 6.4.5

Hi I'm new to FortiOS 6.4.5 and I've been asked to block internet access from a group of pc's on our network.

Attached is the policy, the address group and the adress.

What am I missing here?

Best answer by Toshi_Esumi

Did you place the deny policy at the top above the others with the same interface pair (src to dst)?

SuperUser

Did you place the deny policy at the top above the others with the same interface pair (src to dst)?

New Member

I would also say you need to change the service from "Web Access" to "ALL"

New Member

Thanks to both. Had to change to all and move it to the top. It's working perfectly.

Sign up