Technical Tip: Implicit policy 0 login

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 191091

Description
By default, log events generated by policy 0 can be seen on a debug flow but these are not visible on the GUI.

This article explains how to enable this for troubleshooting, monitoring purposes and/or convenience.

Solution
The following option will make these logs visible in the Forward traffic log:

#config log setting

set fwpolicy-implicit-log enable

set fwpolicy6-implicit-log enable <----- IPv6 supported as well

end

488

Contributors

afornaris

Anonymous

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.