Technical Tip: Using a no default profile-protocol...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 316645

Description

This article describes how to create and apply profile-protocol-options on firewall rules.

Scope

FortiOS 7.2.x and higher.

Solution

Step 1: Via CLI, create the firewall profile-protocol-options:

config firewall profile-protocol-options

edit <new_profile_name>

end

creating new profile.png

Step 2: Set the new profile just created inside the firewall policy.

config firewall policy

edit <firewall_policy_id_number>

set profile-protocol-options <new_profile_name>

end

FP with default profile-protocol-options.PNG

Note: By default, the default profile-protocol-options does not show up on the CLI configuration, it is necessary to use 'show full' to see it.

FP with new profile-protocol-options.PNG

Note: The new profile-protocol-options does not show up on the GUI firewall policy starting from 7.4.x, only on the CLI. For version 7.2.x the option is still available on GUI.

profile GUI.png

723

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Using a no default profile-protocol-options inside a firewall policy