FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kvimaladevi
Staff
Staff
Article Id 271295
Description This article describes how to configure ZTNA rules after the 7.2.5 upgrade.
Scope FortiGate v7.2.5 and above.
Solution

In the previous versions, the option to configure ZTNA rules was available under Policy & Objects -> ZTNA -> ZTNA Rules.


The ZTNA option has to be initially enabled under System -> Feature Visibility.

before 7.2.5 upgrade.PNG
After upgrading to v7.2.5, the ZTNA rules option is not available under Policy & Objects -> ZTNA.

After 7.2.5 rule missing.PNG
To access this feature on 7.2.5, navigate to System -> Feature Visibility and enable Explicit Proxy.

enable explicit proxy.PNG
After enabling Explicit proxy, it will be possible to create a new ZTNA-type policy under Policy & Objects -> Proxy Policy.

proxy policy ztna.PNG

 

It is also possible to create a ZTNA-type policy under Policy & Objects -> Firewall Policy.

The difference is that this method cannot control access based on the destination interface or the real server’s destination address as a Proxy Policy.

 

Related document:

Basic ZTNA configuration | FortiGate / FortiOS 7.2.5 | Fortinet Document Library