| Description | This article explains how to clone existing policies and reorder the policy. |
| Scope | FortiGate. |
| Solution |
In some scenarios or for testing, it is needed to keep cloning the existing policy for the test ip/ device and apply the new changes with UTM and other policy options. It is possible to copy and paste the existing policy from GUI as below.
Go to Firewall policy -> select the policy and 'right-click' with the mouse to get the options.
Select Copy option and then again 'right-click' on the same policy or on the policy, before or after it is wanted to place the cloned policy.
As the selection shows, the cloned policy will be placed on top or below the policy, and the status of the cloned policy will be disabled. Policy ID will be automatically fetched.
From CLI, first, create the cloned policy and then reorder the policy. syntax:
config firewall policy
Example : FortiGate has only one policy.
DCFW_Pri # config firewall policy DCFW_Pri (policy) # get
DCFW_Pri # config firewall policy
DCFW_Pri (policy) # sh
To reorder the clone policy, use the below commands:
DCFW_Pri # config firewall policy
DCFW_Pri (policy) # move 2 before 1
Make sure to use the unused id number for the new policy, if it is wanted to enter any existing policy id for a clone policy it is possible to get the below error:
DCFW_Pri (policy) # clone 1 to 2 |
