Description
This article explains how to find the IPv4 policy id for troubleshooting.
Scope
FortiGate.
Solution
Navigate to Policy and Objects -> Firewall Policy. Select the gear icon and select 'ID' as shown below. A new column 'ID' will show up on the right which shows policy IDs for each policy.
It is also possible to see the policy ID indicated in each policy in the top right corner when editing it.
Refer to the image below:
Policy ID can be seen from the CLI also.
Open the CLI console. Type below command:
show firewall policy
The above snapshot shows that the policy ID is '3' for the "vpn_Test_remote_0" policy.
It is also possible to use the below command in the CLI to find the matching policy:
diagnose firewall iprope lookup <src ip> <src port> <dst ip> <dst port> <protocol> <Incoming_interface>
Related video:
