Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
MERANA
New Contributor

Fortimanager shared policy for two FGT

if I have a shared policy and if i map different zones for both Gateways using the same policy base. is it going to work? 

 

 

2 REPLIES 2
chall_FTNT
Staff
Staff

Yes.

Chris Hall
Fortinet Technical Support
ergotherego
Contributor II

When sharing a policy package across two firewalls, all referenced zones/interfaces (ADOM interfaces) must exist on all target firewalls.

 

So you can map a zone called "public" to different interfaces on different firewalls. But if the policy package references "public" in firewall rules, then "public" must exist and be mapped accordingly on both.