Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Administration Guide

    Home FortiManager 7.0.6 Administration Guide
    7.0.6
    7.6.1
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.6
    6.2.5
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.0.12
    6.0.11
    6.0.10
    6.0.9
    6.0.8
    6.0.7
    6.0.6
    6.0.5
    6.0.4
    6.0.3
    6.0.2
    6.0.1
    6.0.0
    5.6.11
    5.6.10
    5.6.9
    5.6.8
    5.6.7
    5.6.6
    5.6.5
    5.6.4
    5.6.3
    5.6.2
    5.6.1
    5.6.0
    5.4.7
    5.4.6
    5.4.5
    5.4.4
    5.4.3
    5.4.2
    5.4.1
    5.4.0
    5.2.10
    5.2.7
    5.2.6
    5.2.4
    5.2.3
    5.2.2
    5.2.1
    5.2.0
    5.0.12
    5.0.11
    5.0.10
    5.0.9
    5.0.8
    5.0.7
    5.0.6
    5.0.5
    5.0.4
    5.0.3
    5.0.2
    4.3.8
    4.3.7
    4.3.6
    4.3.5
    4.3.4
    4.3.3
    4.3.2
    4.3.1
    4.3.0
    4.2.9
    4.2.8
    4.2.7
    4.2.6
    4.2.5
    4.2.4
    4.2.3
    4.2.2
    4.2.1
    4.2.0
    4.1.0
    4.0.3
    4.0.2
    4.0.1
    4.0.0

    Create new policy packages

    Create new policy packages

    To create a new global policy package:
    1. Ensure that you are in the Global ADOM.
    2. Go to Policy & Objects.
    3. From the Policy Package dropdown menu, select New or right-click beneath Policy Packages in the tree menu and select New. The Create New Policy Package window opens.
    4. Enter a name for the new global policy package.
    5. (Optional) Click the In Folder button to select a folder.
    6. (Optional) Select the Central NAT checkbox to enable Central SNAT and Central DNAT policy types.
    7. Click OK to add the policy package.
    To create a new policy package:
    1. Ensure that you are in the correct ADOM.
    2. Go to Policy & Objects .
    3. From the Policy Package dropdown menu select New or right-click beneath Policy Packages in the tree menu and select New. The Create New Policy Package window opens.

    4. Configure the following details, then click OK to create the policy package.

      Name

      Enter a name for the new policy package.

      Central NAT

      Select the Central NAT check box to enable Central SNAT and Central DNAT policy types.

      NGFW Mode

      Select the NGFW mode, Profile-based (default) or Policy-based.

      SSL/SSH Inspection

      Select an SSL/SSH inspection type from the dropdown list.

      This option is only available for version 5.6 and later ADOMs when NGFW Mode is Policy-based.

      Consolidated Firewall Mode

      Toggle the Consolidated Firewall Mode button to ON to create a consolidated IPv4 and IPv6 policy. By default, the button is turned to OFF.

      Policy Offload Level

      Select the policy offload level. When configuring hyperscale policies, select Full Offload.

      This option is only available for version 6.2 and 6.4 ADOMs.

      In Folder

      Optionally, click the In Folder button to select a folder for the package.

    The Consolidated Firewall Mode option is not available in the Global Database.

    After turning the Consolidated Firewall Mode option to ON, and creating a consolidated IPv4 and IPv6 policy, turning the Consolidated Firewall Mode to OFF will make the consolidated IPv4 and IPv6 policy inaccessible. To access the consolidated IPv4 and IPv6 policy, you must keep the Consolidated Firewall Mode option ON.
    Previous
    Next

    Create new policy packages

    Create new policy packages

    To create a new global policy package:
    1. Ensure that you are in the Global ADOM.
    2. Go to Policy & Objects.
    3. From the Policy Package dropdown menu, select New or right-click beneath Policy Packages in the tree menu and select New. The Create New Policy Package window opens.
    4. Enter a name for the new global policy package.
    5. (Optional) Click the In Folder button to select a folder.
    6. (Optional) Select the Central NAT checkbox to enable Central SNAT and Central DNAT policy types.
    7. Click OK to add the policy package.
    To create a new policy package:
    1. Ensure that you are in the correct ADOM.
    2. Go to Policy & Objects .
    3. From the Policy Package dropdown menu select New or right-click beneath Policy Packages in the tree menu and select New. The Create New Policy Package window opens.

    4. Configure the following details, then click OK to create the policy package.

      Name

      Enter a name for the new policy package.

      Central NAT

      Select the Central NAT check box to enable Central SNAT and Central DNAT policy types.

      NGFW Mode

      Select the NGFW mode, Profile-based (default) or Policy-based.

      SSL/SSH Inspection

      Select an SSL/SSH inspection type from the dropdown list.

      This option is only available for version 5.6 and later ADOMs when NGFW Mode is Policy-based.

      Consolidated Firewall Mode

      Toggle the Consolidated Firewall Mode button to ON to create a consolidated IPv4 and IPv6 policy. By default, the button is turned to OFF.

      Policy Offload Level

      Select the policy offload level. When configuring hyperscale policies, select Full Offload.

      This option is only available for version 6.2 and 6.4 ADOMs.

      In Folder

      Optionally, click the In Folder button to select a folder for the package.

    The Consolidated Firewall Mode option is not available in the Global Database.

    After turning the Consolidated Firewall Mode option to ON, and creating a consolidated IPv4 and IPv6 policy, turning the Consolidated Firewall Mode to OFF will make the consolidated IPv4 and IPv6 policy inaccessible. To access the consolidated IPv4 and IPv6 policy, you must keep the Consolidated Firewall Mode option ON.
    Previous
    Next