Fortinet white logo
Fortinet white logo

Administration Guide

Policy

Policy

A policy provides a convenient way to apply a certain Isolator profile and/or Web Filter profile to local individual users or user groups. Policies are not active until they are applied.

Creating a policy from GUI

Steps
  1. To create a new policy, go to Policies and Profiles > Policies and click Create New Policy.
  2. Type in a name for the policy and select the desired Isolator and/or Web Filter profiles, and/or ICAP Filter profile to be used in the policy.
  3. Click OK to finish.

Creating a policy from CLI

To create FortiIsolator profile from CLI, follow this format:

> set policy <policy-name> <isolator-profile-name> <wf profile-name> <icap-profile-name>

e.g.

> set policy policy_new system_default webfilter_profile ICAP_profile

> show policy

Policy:policy_new

Isolator Profile : system_default

WebFilter Profile : webfilter_profile

ICAP Profile : ICAP_profile

<policy-name > Policy Name
<isolator-profile-name > Isolator profile name
<wf profile-name > Web Filter profile name
<icap-profile-name > ICAP profile name

Policy

Policy

A policy provides a convenient way to apply a certain Isolator profile and/or Web Filter profile to local individual users or user groups. Policies are not active until they are applied.

Creating a policy from GUI

Steps
  1. To create a new policy, go to Policies and Profiles > Policies and click Create New Policy.
  2. Type in a name for the policy and select the desired Isolator and/or Web Filter profiles, and/or ICAP Filter profile to be used in the policy.
  3. Click OK to finish.

Creating a policy from CLI

To create FortiIsolator profile from CLI, follow this format:

> set policy <policy-name> <isolator-profile-name> <wf profile-name> <icap-profile-name>

e.g.

> set policy policy_new system_default webfilter_profile ICAP_profile

> show policy

Policy:policy_new

Isolator Profile : system_default

WebFilter Profile : webfilter_profile

ICAP Profile : ICAP_profile

<policy-name > Policy Name
<isolator-profile-name > Isolator profile name
<wf profile-name > Web Filter profile name
<icap-profile-name > ICAP profile name