Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Not applicable

Multiple edit and VIPs

Hi all. I have a lot of VIP with static NAT configured on a 1000A FG and I have to apply a protection profile on all of them. At the moment I have a single policy for every single VIP but it is becoming very hard to manage them. So i was wondering: if I create a VIP group, could i create a single policy for all VIPs instead of one for every VIP? Will static NAT keep working? If not, if it is possible to apply the same configuration on many policies at the same time, without having to modify every single policy? Thank you all Bye Francesco Editing
Valued Contributor III

Do you mean each policy has it' s own protection profile now?

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at:

Not applicable

Nono, I have to add the same protection profile to each policy...and it' s a bit annoying repeat the same configuration 50 times...
New Contributor

Yes, you can group all your VIPs to one vip group unless you have authentication in your firewall policy. Also you could use Multiple VIPs as dstaddr.
Top Kudoed Authors