Apply and Application Control Policy to all inbound traffic

[xpenno255]

Hi all,

is it possible to apply application control policy to all inbound traffic without an IPV4 policy set to any any accept which is obviously not desirable.

Cheers

Spence

[bommi]

Hi,

you can do this using an "Interface Policy".

If you are only using a fortigate you need to go to the cli and do it like in this example:

config firewall interface-policy     edit 1         set interface "wan1"         set application-list-status enable         set application-list "default"         set av-profile-status enable         set av-profile "default"     next end

If you have an fortimanager you can also do this using the manager gui, you just need to enable the interface policy in the display options.

You should know that every traffic to this interface will go to the ips engine, as an result you can get an negative performance impact.

Regards

bommi