Block gateway-sourced traffic...

[kadey]

I've created policies to restrict traffic to the internet sourced from a FortiGate 6.2 device itself, but they're not working. They're at the top of the policy list, and Deny in enabled.

Is this possible?

[Dave_Hall]

Hi Ken.

If you are trying to block incoming traffic from the Internet to your fgt, you will need to use a local-in-policy. 

Please note that ports used by the fgt are needed for certain services. This link explains what those ports are.  Is there a reason for wanting to block certain outgoing ports from the fgt itself?

[kadey]

I'm just testing using Fabric Connector in policies, and just picked outbound traffic to test.

I can test with inbound as well, if I can use Fabric Connector objects in a local-in-policy.