Security profiles conflicts system settings

3 replies
3562 views

Hi guys,

I would like to know why I cannot set my security profiles on my security policies... I cannot found why or how to solve it.

When I set a security profile like anti virus or web filter or application control or ips (default or new created ones), I receive a message that it conflicts with the system settings..

I do have license for that because on the status dashboard those are green marked.

Can someone help me? :)

Thanks and much appreciated.

kr,

araatnAnswer

New Member

@boneyard,

I found the solution which was creating my own firewall profile-protocol-options and applying this to all my security profiles which was ok

Solution steps are these below:

FGT40C# config firewall profile-protocol-options FGT40C(profile-protocol-options)# edit test5 FGT40C(test5)# --> set the protocol options as needed, or leave it as the default FGT40C(test5)# end 2. Put the UTM Proxy Options (or Protocol Options) that were created above to the firewall policy: FGT40C# config firewall policy FGT40C(policy)# edit 5 -----> Create firewall policy or choose the old one FGT40C(5)# set utm-status enable FGT40C(5)# set profile-protocol-options test5 -----> put test5 in the firewall policy. FGT40C(5)# set webfilter-profile default -----> user webfilter "default" with test5 FGT40C(5)# end

boneyard

Valued Contributor

might have something to do with flow / proxy profiles while the firewall is in other mode

what model firewall, which version FortiOS?

araatnAuthorAnswer

New Member

@boneyard,

I found the solution which was creating my own firewall profile-protocol-options and applying this to all my security profiles which was ok

Solution steps are these below:

FGT40C# config firewall profile-protocol-options FGT40C(profile-protocol-options)# edit test5 FGT40C(test5)# --> set the protocol options as needed, or leave it as the default FGT40C(test5)# end 2. Put the UTM Proxy Options (or Protocol Options) that were created above to the firewall policy: FGT40C# config firewall policy FGT40C(policy)# edit 5 -----> Create firewall policy or choose the old one FGT40C(5)# set utm-status enable FGT40C(5)# set profile-protocol-options test5 -----> put test5 in the firewall policy. FGT40C(5)# set webfilter-profile default -----> user webfilter "default" with test5 FGT40C(5)# end

boneyard

Valued Contributor

nice, thanks for sharing

Sign up

Login with SSO

Login to the community

Login with SSO