show firewall policy would be a start
you can do that for any configured item;
e.g
show firewall addresss ( would show you address configs )
show sys interface ( would show you ALL interface configs )
where-as
show sys interface wan2 ( would show you just wan2 )
You can also using unix grep to look for certain or not certain strings
e.g
show firewall address | grep " MYHOSTXXY" ( would show any matchs with MYHOSTXXY )
where-as
show firewall add | grep -v " MYHOST" ( would show all hosts that DO NOT have MYHOST in the name
)
btw: the grep option is not supported in earlier releases of fortiOS.
