Best practices to review configuration and rules for fortigate firewall and fortiweb

[okllee]

Hello everyone,

I’m looking for the best way to review configurations and rules on FortiGate Firewall and FortiWeb. Are there any tools available for this, or benchmarks to follow?

Any suggestions would be greatly appreciated!

Thank you!

[mpapisetty]

Hi @okllee ,

If you have a FortiManager, I would recommend using the consistency check tool that can help clean up your firewall policies - 

https://docs.fortinet.com/document/fortimanager/7.6.2/administration-guide/233367/perform-a-policy-c...

Otherwise, a policy review is an extensive process that depends on your requirements and dependencies. There is no one tool that can validate if your policies are at their best unless you have a 3rd party or the vendors consultant looking at it. 

[AEK]

Hi Okllee

Hope this discussion can help.

https://community.fortinet.com/t5/Support-Forum/Firewall-Policies/m-p/286505