Sophos start options

This table lists the start settings.

Setting	Description
Profile
Description	Enter a description of the configuration.
Output Options
Output Format	Select the appropriate output for your target Fortinet device.
FOS Version	The configuration syntax is slightly different among FortiOS 6.4, 7.0, 7.2, and 7.4. Select the version that corresponds to the FortiOS version on the target.
Input
Source Configuration	Select the input file.
Bulk Conversion	If there are many devices to be converted where all of them are the same model, sharing the same interface mapping relationship in conversion, then bulk conversion can convert all of them at once. Collect all the configuration files to be converted, compress them into a ZIP file and use the ZIP file as the input.
Target device (Optional)
Target device	Select the model of the target device, or select a device connected to FortiConverter.
Conversion Options
Discard unreferenced firewall objects	Specifies whether addresses and services that aren't referenced by a policy are saved and added to the output. This option can be useful if your target device has table size limitations. You can view the unreferenced objects that FortiConverter removed on the Tuning page.
Increase Address and Service Table Sizes for High-End Models	You can customize the maximum table sizes that FortiConverter uses when Adjust table sizes is selected. For more information, see Adjusting table sizes.
Policy index start from 1 instead of 10000	When selected, the serial number of firewall policies will start from 1 instead of 10000.
NGFW policy-based mode	When selected, the conversion will be in NGFW policy-based mode. "`firewall policy`" will become "`firewall security-policy`" instead, and "`set application 00000`" will be generated in policies, which requires manual processing. There will also be some other minor differences adapted for the NGFW policy-based CLI.
Comment Options
Service Group Comment	Specifies whether FortiConverter copies the service group comment from the source configuration to the FortiGate service group.
Nat Merge Options
Enable central NAT merge	Specifies whether FortiConverter converts NATs to FortiGate central NATs instead of policy-based NATs. Currently only central NAT mode is supported, and NAT is available only for the SG model.

This table lists the start settings.

Setting

Description

Profile

Description

Enter a description of the configuration.

Output Options

Output Format

Select the appropriate output for your target Fortinet device.

FOS Version

The configuration syntax is slightly different among FortiOS 6.4, 7.0, 7.2, and 7.4. Select the version that corresponds to the FortiOS version on the target.

Input

Source Configuration

Select the input file.

Bulk Conversion

If there are many devices to be converted where all of them are the same model, sharing the same interface mapping relationship in conversion, then bulk conversion can convert all of them at once. Collect all the configuration files to be converted, compress them into a ZIP file and use the ZIP file as the input.

Target device (Optional)

Target device

Select the model of the target device, or select a device connected to FortiConverter.

Conversion Options

Discard unreferenced firewall objects

Specifies whether addresses and services that aren't referenced by a policy are saved and added to the output. This option can be useful if your target device has table size limitations. You can view the unreferenced objects that FortiConverter removed on the Tuning page.

Increase Address and Service Table Sizes for High-End Models

You can customize the maximum table sizes that FortiConverter uses when Adjust table sizes is selected. For more information, see Adjusting table sizes.

Policy index start from 1 instead of 10000

When selected, the serial number of firewall policies will start from 1 instead of 10000.

NGFW policy-based mode

When selected, the conversion will be in NGFW policy-based mode.

"firewall policy" will become "firewall security-policy" instead, and "set application 00000" will be generated in policies, which requires manual processing. There will also be some other minor differences adapted for the NGFW policy-based CLI.

Comment Options

Service Group Comment

Specifies whether FortiConverter copies the service group comment from the source configuration to the FortiGate service group.

Nat Merge Options

Enable central NAT merge

Specifies whether FortiConverter converts NATs to FortiGate central NATs instead of policy-based NATs. Currently only central NAT mode is supported, and NAT is available only for the SG model.

Online Help

Sophos start options

Sophos start options

Sophos start options