Unable to create DoS Policy

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 368829

Description

This article describes the error message 'Entry not found in datasource' when creating a DoS Policy in version 7.4.6 or 7.6.1. Policies that use an interface show missing or empty values after an upgrade. The interface port3 that is being added to the DoS policy is a member of the SD-WAN zone.

Scope

FortiOS v7.4.6, v7.6.1.

Solution

After upgrading to version 7.4.6 or 7.6.1 GA, users must manually recreate these policies and assign them to the appropriate SD-WAN zone.

Configure DoS Policy and set SD-WAN zone for its interface in CLI:

config firewall DoS-policy

edit 1

set name test

set interface SDWAN

set srcaddr "all"

set dstaddr "all"

set service "ALL"

end

Verify the DoS policy in GUI.

Additionally, interfaces that are member of a ZONE [regular interface zones] cannot be referred individually in DoS policies. Use ZONE as a reference in the DoS policies.

Related document:

Policies that use an interface show missing or empty values after an upgrade

234

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Unable to create DoS Policy

You are leaving our website