Output from diag debug flow filter

5 replies
6019 views

Hello, can anyone tell me what msg="Allowed by Policy-1:" means at the output of diagnose debug flow filter saddr ?

Toshi_Esumi

SuperUser

Means the packet arrived at your FGT is allowed to go out by firewall policy ID 1. Depending on your FortiOS version GUI might not show the ID by default and show only sequence. You might need to add ID into the table view. In CLI it always show up under "config firewall policy".

opifexAuthor

New Member

Thanks, "id" was disabled, but in the cli under firewall policy I did not think that "edit 1" corresponds to policy-1.

What is the difference between id and seq. # In the table?

Ashik_Sheik

New Member

Hi ,

When policy is created unique assigned ID which can be tracked by using this ID no.Sequence no mainly used in GUI to track the policy .But in cli only policy ID is used and even in the logs .

Regds,

Ashik

Sign up

Login with SSO

Login to the community

Login with SSO