Fortinet white logo
Fortinet white logo

New Features

Support added for "Install On" function for policy blocks 7.4.2

Support added for "Install On" function for policy blocks 7.4.2

Note

This information is also available in the FortiManager 7.4 Administration Guide:

Support has been added for an "Install On" feature for Policy Blocks.

To use the Install On feature for policy blocks:
  1. Go to Policy & Objects > Policy Packages.
  2. From the Tools menu, select Feature Visibility, and enable Policy Block.
  3. Install from the Policy Blocks menu:
    1. Select a Policy Block from the tree menu.
    2. Click the edit icon in the Install On column.
    3. Select the target device(s) for installation. You can select any installation targets.
  4. Install from the Policy Package:
    1. Go to a Policy Package where the Policy Block is installed, and select the Policy Block.
    2. Click the edit icon in the Install On column.
    3. Select the target device(s) for installation. You can select any installation targets, including ones not assigned to the Policy Package's installation targets.
  5. Click Apply, and install the Policy Block using Installation Targets. In the example below, Policy a1, a4, and a5 are installed.

    Below is the example copy log:

    config firewall policy

    edit 1071741825

    set name "pb1-a1"

    set uuid 0722adfadea-729d-51ee-0fad-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    edit 1071741834

    set name "pb1-a4"

    set uuid 99adsfadsf34e-7375-51ee-c3a4-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    edit 1071741835

    set name "pb1-a5"

    set uuid 9ffdca46-7375-51ee-ca51-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    end

Support added for "Install On" function for policy blocks 7.4.2

Support added for "Install On" function for policy blocks 7.4.2

Note

This information is also available in the FortiManager 7.4 Administration Guide:

Support has been added for an "Install On" feature for Policy Blocks.

To use the Install On feature for policy blocks:
  1. Go to Policy & Objects > Policy Packages.
  2. From the Tools menu, select Feature Visibility, and enable Policy Block.
  3. Install from the Policy Blocks menu:
    1. Select a Policy Block from the tree menu.
    2. Click the edit icon in the Install On column.
    3. Select the target device(s) for installation. You can select any installation targets.
  4. Install from the Policy Package:
    1. Go to a Policy Package where the Policy Block is installed, and select the Policy Block.
    2. Click the edit icon in the Install On column.
    3. Select the target device(s) for installation. You can select any installation targets, including ones not assigned to the Policy Package's installation targets.
  5. Click Apply, and install the Policy Block using Installation Targets. In the example below, Policy a1, a4, and a5 are installed.

    Below is the example copy log:

    config firewall policy

    edit 1071741825

    set name "pb1-a1"

    set uuid 0722adfadea-729d-51ee-0fad-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    edit 1071741834

    set name "pb1-a4"

    set uuid 99adsfadsf34e-7375-51ee-c3a4-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    edit 1071741835

    set name "pb1-a5"

    set uuid 9ffdca46-7375-51ee-ca51-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    end