Unable to Enable Security profiles in Policies | 100D | 5.4.1

Forum|Forum|9 years ago
November 2, 2016
2 replies
13443 views

Hello Everyone,

I have created security profiles ( webfiltering & app control). However, I am not able to enable it in the policy, I switch the enable button but OK button becomes inactive.

I might be missing something but I am new to this device, your priceless assistance will be highly appreciated.

5.4

smcguire

New Member

Check your inspection mode under Dashboard|System Information|Inspection Mode (5.4.0 GUI) not sure if it's the same for 5.4.1.

If your in proxy and the security profile is set for flow-based you won't be able to select it for new IPv4 Policy's.

Found that out recently just passing it along.

-Stephen

tanr

New Member

Do you mean you can't enable the security policy, or you can't set a particular security profile (like web filtering or app control) on a policy?

In 5.4.x you can actually set flow-mode security profiles on a security policy, but not from the GUI. You need to set them in the CLI. On a 5.4.2 FortiGate set to proxy mode I have multiple security policies with flow-mode profiles. Note that app control profiles are *always* flow-mode, but web filter profiles can be proxy mode or flow mode.

This has been discussed a bit on the forums. See https://forum.fortinet.com/tm.aspx?m=135666.

There are some limitations and caveats, which the thread above discusses.

Sign up

Login with SSO

Login to the community

Login with SSO