Technical Tip: How to configure multiple interfaces on a firewall policy (GUI)

[vpoluri]

Description

By default on the firewall policy GUI, multiple interfaces can not be set. This article describes how to enable this feature.

Scope

FortiGate.

Solution

This feature can be enabled by CLI.

config  system  settings

    set  gui-multiple-interface-policy enable

end

It can also be enabled in the GUI by going to System -> Feature, selecting the page, and toggling 'Multiple Interface Policies'.

Once enabled go to the firewall policy and add multiple interfaces as required.

Note:

On versions before 7.4, using multiple incoming/outgoing interfaces in the firewall policy will cause the 'Interface Pair View' to be greyed out as shown below. Starting from FortiOS 7.4, 'Interface Pair View' will not be greyed out.

Related articles:

Technical Tip: Firewall policy views

Technical Tip: How to allow the configuration of policies with multiple source/destination interface...

Technical Note: Cannot create firewall policies with interface 'any'