Configuring a firewall policy
When devices are behind FortiGate, you must configure a firewall policy on FortiGate to grant the devices access to the internet. In other words, a firewall policy must be in place for any traffic that passes through a FortiGate.
To create a firewall policy in the GUI:
-
Go to Policy & Objects > Firewall Policy.
-
Click Create New. The New Policy pane is displayed.
-
Enter a Name and configure the following necessary settings:
Incoming Interface
LAN (port1)
Outgoing Interface
WAN (port2)
Source
Source IPv4 address name and address group names
Destination
Destination IPv4 address name and address group names
Schedule
Always
Service
All
Action
Accept
- Click Save.