Check Which Policy the Traffic hits.

[shane_85]

Hi all ,

New to Fortigate, can anyone tell me if you can    see what policy a packet hits first ? the firewall im nor managing has ,alot of policies  most of them redundant, i would like a sort of sniffer to see what Policy was use to either accept or dent the packet on CLI.

[gschmitt · Accepted solution]

Check out diag debug flow:

http://docs-legacy.fortinet.com/fos50hlp/50/index.html#page/FortiOS%205.0%20Help/VDOM-probs.181.14.h...

http://kb.fortinet.com/kb....do?externalID=FD33882