Section view is currently Disabled

Forum|Forum|11 years ago
October 30, 2014
2 replies
19630 views

How can we easily identify that which ploicy creating problem.

I am not using policy with "any" interface. Plz help

ShrewLWD

New Member

Hi IFT,

It's *possible* it got disabled in the global...

config system global

set gui-policy-interface-pairs-view enable

end

It's not just the 'ANY' interface that can cause this, however. Combining two interfaces into one rule will also break section view (a super silly example: you have your WAN and DMZ listed as the Source or destination, of a rule).

ift38375Author

New Member

ShrewLWD wrote:
Hi IFT,
It's *possible* it got disabled in the global...
config system global
set gui-policy-interface-pairs-view enable
end

It's not just the 'ANY' interface that can cause this, however. Combining two interfaces into one rule will also break section view (a super silly example: you have your WAN and DMZ listed as the Source or destination, of a rule).

Hello Shrew,

this command is not working in CLI mode, version of FortiGate 100D is v5.0,build4429.

There are no such type of rule or policy in Firewall as you said ((a super silly example: you have your WAN and DMZ listed as the Source or destination, of a rule). Give me some examples or trick to search conflict rules.