Creating policy packages
Create the following policy packages to install on the FortiGates:
- Policy package for the hub
- Policy package for the branches
After you create policy packages, you'll add firewall policies to each policy package.
To create a policy package:
- Go to Policy & Objects > Policy Packages.
- In the toolbar, click Policy Package > New.
- In the Name box, type DC6, and click OK.
- Repeat this procedure to create a policy package named SD-WAN-156 for branches.
For information about creating policy packages, go to the FortiManager Document Library > FortiManager Administration Guide > Firewall Policy & Objects > Managing policy packages > Create new policy packages.
To add firewall policies to policy packages:
- Go to Policy & Objects > Policy Packages.
- In the tree menu, select a policy package.
- In the content pane, click Create New. By default, policies will be added to the bottom of the list, but above the Implicit policy.
- Configure the firewall policy settings, and click OK.
Create the following set of policies for the branches:
- Branch to overlay
- Overlay to branch
Create the following set of policies for the hub:
- Overlay to DC
- Overlay to INET
- Branch to branch
For information about creating firewall policies, go to the FortiManager Document Library > FortiManager Administration Guide > Firewall Policy & Objects > Managing policies > Create new Firewall Policy.