Skip to content

Instantly share code, notes, and snippets.

@kongou-ae

kongou-ae/FortiGate FW policy (.conf)

Last active August 29, 2015 13:57
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save kongou-ae/9894649 to your computer and use it in GitHub Desktop.
Save kongou-ae/9894649 to your computer and use it in GitHub Desktop.
Download ZIP
FortiGate FW policy (.conf)
Raw
FortiGate FW policy (.conf)
config firewall policy
edit 13
set srcintf "VLAN-200"
set dstintf "wan1"
set srcaddr "192.168.200.0/24"
set dstaddr "all"
set action accept
set utm-status enable
set identity-based enable
set nat enable
config identity-based-policy
edit 1
set schedule "always"
set logtraffic enable
set utm-status enable
set groups "FSSO_Guest_Users"
set service "ANY"
set av-profile "default"
set profile-protocol-options "default"
next
edit 2
set schedule "always"
set logtraffic enable
set groups "ssllocal_group"
set service "ANY"
next
end
next
edit 14
set srcintf "VLAN-2"
set dstintf "wan1"
set srcaddr "192.168.2.0/24" "192.168.1.0/24"
set dstaddr "all"
set action accept
set schedule "always"
set service "ANY"
set utm-status enable
set logtraffic enable
set profile-protocol-options "default"
set nat enable
next
end
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment