Technical Tip: Using Policy Manager to create multiple rules (guidelines)

[#1]

Article

When adding policies to Fortigates using Fortimanager Policy Manager.

This assumes that all FortiGates to be configured are correctly connected and able to receive information from the FMG server.

a) First, each device will only accept policies for interfaces, modems etc. that it can actually support.  In other words, a FGT100 will not support policies for Internal to Wan1.  Wan1 is a FGT60 term.  Be aware.  Also, FGT60 is not Internal to External, but Internal to Wan1 or 2.

b) Please note that policy manager, keeping the first note in mind, will push All new policies to the FortiGates.  Meaning that if you have already configured some policies that you wish to save, they may be lost.  The policy manager does not push the delta, but every policy.  Meaning if it does not exist in the list of policies being pushed, it will not exist after they have been pushed.

S.