Fortinet black logo

Administration Guide

Home FortiManager 7.4.2 Administration Guide
7.4.2
7.4.2
7.4.1
7.4.0
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.6
6.2.5
6.2.3
6.2.2
6.2.1
6.2.0
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.6.11
5.6.10
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.6.4
5.6.3
5.6.2
5.6.1
5.6.0
5.4.7
5.4.6
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4.0
5.2.10
5.2.7
5.2.6
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0

Creating policy packages

Creating policy packages

Create a policy package with selected objects.

Tooltip

The use of local Policy Blocks simplifies the process for upgrading your ADOMs and can be considered as an alternative to Global Policy Packages. For more information, see Using Policy Blocks versus Global Policy Packages.
Note

NGFW mode is not supported for global policy packages.
To create a policy package:

  1. Change the ADOM to Global Database.

  2. Click Policy Packages.

  3. Select Policy Package > New Package.

  4. Specify a name for the policy package in the Name field.

  5. Select the folder where the policy package is to be saved. Click OK.

  6. Click the newly created policy package.

  7. Go to Firewall Header Policy and click Create New.

  8. Configure the Firewall Header Policy and click OK. For more information, see Creating policies.

  9. Go to Firewall Footer Policy and click Create New.

  10. Configure the Firewall Footer Policy and click OK. For more information, see Creating policies.

Tooltip

Importing configs with global policies

When re-importing a managed device's configuration, global policies and objects that are installed on the device will not be re-imported, and the following error will be displayed: The global header/footer policies will not be imported. Global policy and objects can not be retrieved from a managed device.

When a global policy package is unassigned from a device, you must perform an install to the target device to remove the global policies and objects.
Previous
Next

Creating policy packages

Create a policy package with selected objects.

Tooltip

The use of local Policy Blocks simplifies the process for upgrading your ADOMs and can be considered as an alternative to Global Policy Packages. For more information, see Using Policy Blocks versus Global Policy Packages.
Note

NGFW mode is not supported for global policy packages.
To create a policy package:

  1. Change the ADOM to Global Database.

  2. Click Policy Packages.

  3. Select Policy Package > New Package.

  4. Specify a name for the policy package in the Name field.

  5. Select the folder where the policy package is to be saved. Click OK.

  6. Click the newly created policy package.

  7. Go to Firewall Header Policy and click Create New.

  8. Configure the Firewall Header Policy and click OK. For more information, see Creating policies.

  9. Go to Firewall Footer Policy and click Create New.

  10. Configure the Firewall Footer Policy and click OK. For more information, see Creating policies.

Tooltip

Importing configs with global policies

When re-importing a managed device's configuration, global policies and objects that are installed on the device will not be re-imported, and the following error will be displayed: The global header/footer policies will not be imported. Global policy and objects can not be retrieved from a managed device.

When a global policy package is unassigned from a device, you must perform an install to the target device to remove the global policies and objects.
Previous
Next