Normalized interface to map as zone only 6.4.7
Starting in FortiManager 6.4.7, map as zone only mode is available for normalized interfaces.
To configure and use a normalized interface as zone only:
- Enable mapping as zone only through the CLI with the following commands:
config system global
set normalized-intf-zone-only enable
- On FortiManager, go to Policy & Objects > Object Configuration > Normalized Interface, edit or create a new normalized interface, and select Map as zone only. Save the normalized interface.
- Go to Device Manager > Device & Groups, and create a new device zone.
- Normalized zone only name selection as well as the option to input a name are both available.
- Dynamic mapping is available in the table to filter by device zone and let the user select options only showing ADOM normalized interface zones that are configured as zone only.
- Once a zone is selected in the Normalized Interface field, if the zone name field is empty, the GUI will automatically fill the zone name input box.
- After saving, the device zone is created.
- Normalized zone only name selection as well as the option to input a name are both available.
- Create a policy using the zone-only normalized interface.
- Install and review the changes in the Install Preview.
config system zone
edit "zoneOnly1"
set interface "port9" "port10"
next
end
config firewall policy
edit 3
set uuid 34808cec-020f-51ec-64a0-f0c7e494e816
set srcintf "zoneOnly1"
set dstintf "any"
set srcaddr "all"
set dstaddr "all"
set schedule "always"
set service "ALL"
set logtraffic all
next
end
- After installation, FortiGate gets the configuration correctly.