Dear All,
Yesterday I was configuring Fortigate Firewall and I have created multiple Zones like - APP ZONE, server zone, Prod Zone, FTP server Zone.
Having created above zone I was unable to add those zone incoming source address why ?.
At the Sophos Firewall this option is available. Can anyone explain what should I do for it, OR I am doing something wrong.
Your response would be highly aprriciated.
Thank you.
Solved! Go to Solution.
Hi Umesh,
Are you saying the interface zones you created cannot be added to the source interface in policy? Are you able to add one zone atleast as source/destination interface? If you need to add multiple zones/interfaces you need to enable " Multiple Interface Policies" under "System> Feature Visibility".
You mentioned zones cannot be added as source address, not sure if it is a typo - zones can be used as Incoming or Outgoing interface and not as source/destination address.
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
Hi Umesh,
Are you saying the interface zones you created cannot be added to the source interface in policy? Are you able to add one zone atleast as source/destination interface? If you need to add multiple zones/interfaces you need to enable " Multiple Interface Policies" under "System> Feature Visibility".
You mentioned zones cannot be added as source address, not sure if it is a typo - zones can be used as Incoming or Outgoing interface and not as source/destination address.
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
Hi suraj,
Thanks for your reply, I will check and get back to you.
Regards,
umesh
Hi Umesh
Better not using multiple interfaces, so you keep policy visibility by interface pair. It is the best view.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.