When I look at the policies in my Fortigate 60D, I don't see what I
expect to see. I expect to see the policies listed in the order they are
applied from top (#1) to bottom (#44). I am forced to use the global
view due to how one or more policies are...
I have recently moved from a FGT100A to a FGT60D. I am now trying to
create (recreate) the BWL that I had from the old Fortigate. I can add
entries through the GUI and/or individual CLI commands but I would
prefer to do a bulk upload of CLI commands ...
Howdy, I am currently running an EOL Fotrigate 100A (3.00 559). I am
trying to move to a newer Fortigate 60D (5.0 something) no wireless. I
have created several vlan sub-interfaces under the INTERNAL interface.
All the vlans are coming from the same ...
Hmm. Maybe my thinking is what is wrong. The reason I think the policy
order is backwards is the DENY ALL policy is last. I thought the DENY
ALL policy should be the first policy to be applied and all the other
policies are then opening a path for th...
Thank you for your replies. I didn't realize there was both SEQ and ID
columns. The numbers I was referring to were sequence numbers (I didn't
have the ID column displayed). If the ID is just a label then I presume
policies are applied based on the S...
OK, all is right with the world again. Thanks to all for the quick
responses. Using the console to debug the bulk as well as copy and paste
individual commands showed me what was wrong. I was trying to copy and
paste commands earlier but I didn' t ha...
OK, changed from switch mode to interface mode. re-did all FW addressing
and FW policies. I have more tests to do before I can say ALL is good
for sure but so far everything is working like I had hoped. On the
FGT100A the most of the vlans were liste...
yes, it was in switch mode. I verified through the GUI Network->Network
and right clicking on the (at the time) Internal physical interface. A
context menu opens and I choose " change mode" with the options being
switched or interface mode. It does m...