Skip to main content
luca1994
luca1994
Explorer III
May 9, 2025
Solved

Unable to create policy package from Fortimanager (button is grey-out)

  • May 9, 2025
  • 2 replies
  • 1482 views

Hello Team,

 

I connected an already configured fortigate cluster to a Fortimanager. Now I wanted to try to create a policy from the Fortimanager and push it to the firewall. Can you point me to the correct procedure?
To do this I saw that you have to create a policy package but I have the grey button and I can't click it.

I am logging into the FortiManager as an admin user (so I am ruling out permissions problems).

I point out that on the same adom (root) as Fortimanager there is already another pair of fortigates which already have a policy package assigned.

 

Please feel free to ask for more details.
I thank you in advance for the support

BR

 

Best answer by kaman

Hi luca1994,

Go to System Settings > Admin Profiles, identify the profile assigned to the system admin, enable 'Read-Write' for 'Add/Delete/Edit Devices/Groups' and 'Lock/Unlock ADOM', then verify the behaviour.

If you have found a solution, please like and accept it to make it easily accessible to others.


Regards,
Aman

2 replies

kaman
Staff
kaman
Staff
May 10, 2025

Hi luca1994,

Please note the firewall policy option is visible only if the NGFW Mode is selected as Profile-based in the policy package.

Kindly refer to the documents below for more information:

https://docs.fortinet.com/document/fortimanager/7.6.0/administration-guide/663598/create-a-new-firewall-policy

https://community.fortinet.com/t5/FortiManager/Technical-Tip-FortiManager-policy-package-installation-and/ta-p/195923


Regards,
Aman

    luca1994
    luca1994Author
    Explorer III
    May 12, 2025

    Hello @kaman,

    NGFW Mode is already selected as Profile-based.

     

    FortiManager version --> 7.2.10

    FortiOS versione --> 7.2.10

     

    I currently have a fortigate 6.4 connected to FortiManagere with a policy package assigned but even here I have the “new” button disabled. I see that the “add device” button from FortiManager is also disabled.

     

    Thanks

    BR

     

    kaman
    Staff
    kamanAnswer
    Staff
    May 12, 2025

    Hi luca1994,

    Go to System Settings > Admin Profiles, identify the profile assigned to the system admin, enable 'Read-Write' for 'Add/Delete/Edit Devices/Groups' and 'Lock/Unlock ADOM', then verify the behaviour.

    If you have found a solution, please like and accept it to make it easily accessible to others.


    Regards,
    Aman

      Terms & ConditionsAccessibility statement