Multiple edit and VIPs

Report Inappropriate Content · ‎09-25-2007

Hi all. I have a lot of VIP with static NAT configured on a 1000A FG and I have to apply a protection profile on all of them. At the moment I have a single policy for every single VIP but it is becoming very hard to manage them. So i was wondering: if I create a VIP group, could i create a single policy for all VIPs instead of one for every VIP? Will static NAT keep working? If not, if it is possible to apply the same configuration on many policies at the same time, without having to modify every single policy? Thank you all Bye Francesco Editing

rwpatterson · ‎09-25-2007

Do you mean each policy has it' s own protection profile now?

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Report Inappropriate Content · ‎09-25-2007

Nono, I have to add the same protection profile to each policy...and it' s a bit annoying repeat the same configuration 50 times...

Linda · ‎10-03-2007

Yes, you can group all your VIPs to one vip group unless you have authentication in your firewall policy. Also you could use Multiple VIPs as dstaddr.