Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
boringpeople
New Contributor

How to automatically kill sessions after deleting or disabling a policy?

I’m deleting (or disabling) a firewall policy, but the sessions that were created under that policy remain active.
firewall-session-dirty is set to clear-all. But it doesn’t clear the existing sessions.

Is there any way to make FortiGate automatically terminate sessions when a policy is disabled or deleted?
Or is manual session clearing (e.g. via diagnose sys session clear) the only option?

1 REPLY 1
AEK
SuperUser
SuperUser

If am not wrong changing the policy (e.g. service) will make the session dirty. If so then as a workaround you may change it before disabling it.

AEK
AEK
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors