Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
duckwood98
New Contributor

Created on ‎09-22-2014 10:05 AM

using " any" as interface on policy

how does fortigate determine order of policies when the interface is specified as " any" ? I am running with the global setting " set internal-switch-mode interface" and I want to take advantage of using " any" as interface to cut down on the number of policies I have to create. Are there any performance issues?
3583
0 Kudos
2 REPLIES 2
Adrian_Buckley_FTNT
Staff
Staff

Created on ‎09-23-2014 07:43 AM

The egress interface, in that case will be determined via the routing rules. The packet will take the the direction specified by the routing table. In the case of multiple options then the tie will be split based on the configured ECMP behavior.
985
0 Kudos
norouzi
Contributor

Created on ‎10-30-2014 03:41 AM

Exactly. Routing will be run before Policy. So FortiGate knows the destination interface from the routes.

985
0 Kudos
Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.