Firewall Policy-Policy & Objects

[Omaha]

Hi everybody,

Does NGFW Policy Base filtering will do the job to allow the owner of the company where I work to be able to access any APP, WEB without been blocked by our very tight Firewall policy? We have a big number of users that like to be doing nothing, just watching YouTube and other sites. We decided to block everybody but not the owner...any help will be very much appreciated!! Thanks.

[Anonymous]

Hello Jorge,

           Welcome to Fortinet community and Thank you for your post. Hopefully, you've been keeping safe and doing well!

This can be achieved for sure. You will have to create separate policy for  the user whom you do not want to restrict access to the internet and a separate policy for the rest who needs restriction. If the user machines use static IP then you can source according to the  IP's, if not you will need an identity based source filtering. More information on policy based filtering is present in below link

https://docs.fortinet.com/document/fortigate/6.2.0/Cookbook/978598/profile-based-ngfw-vs-policy-base...

Hope this helps.

Regards