FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Gaetan_
Staff
Staff
Article Id 204940

Description

 

This article describes how to see and retrieve the policy sequence groups and read them via CLI.

 

Scope

 

FortiGate up to v7.4.

 

Solution

 

It is possible to configure sequence groups on FortiGate policies for easier management. However, if it is deleted, the user might want it back, and it does not appear in the device configuration when issuing show commands:

 

Gaetan__6-1645017378738.png

 

Gaetan__7-1645017378749.png

 

Even if sequence groups do not appear with show commands, they show on configuration backup under the name of 'global-label':

 

Gaetan__2-1645017318330.png

 

It is possible to reconfigure the group sequence either from the GUI or CLI.

 

CLI example:

 

Gaetan__3-1645017318343.png

 

Gaetan__4-1645017318347.png

 

Gaetan__5-1645017318356.png

 

Note: The 'global-label' command is a hidden one. This means that it will not auto-complete, and it has to be completely typed out by the user.

Also, this command will not be shown in the output of a 'show' command. In order to view it, a backup of the configuration must be downloaded from the GUI.

 

Related articles:

Technical Tip: Design change on grouping policies in sequence groups

Technical Tip: Renaming sequence grouping for firewall policies for 'By sequence grouping' view