Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

Create a new local-in policy

The section describes how to create new IPv4 and IPv6 local-in policies to control inbound traffic that is going to a FortiGate interface.

See Local-in policy in the FortiOS Administration Guide for more information.

On the Policy & Objects pane, from the Tools menu, select Display Options, and then select the IPv4 Local In Policy and IPv6 Local In Policy checkboxes to display these options.

To create a new Local-In policy:
  1. If using ADOMs, ensure that you are in the correct ADOM.
  2. Go to Policy & Objects > Policy Packages.
  3. In the tree menu for the policy package in which you will be creating the new policy, select IPv4 Local In Policy or IPv6 Local In Policy.
  4. Click Create New.
  5. Enter the following information:

    Option

    Description

    Interface

    Select the interface.

    Source Address

    Select souce addresses, address groups, virtual IPs, and virtual IP groups.

    Destination Address

    Select destination addresses, address groups, virtual IPs, and virtual IP groups.

    Service

    Select services and service groups.

    Schedule

    Select a one-time schedule, recurring schedule, or schedule group.

    Action

    Select an action for the policy to take: DENY or ACCEPT.

    HA Management Interface Only

    Enable to dedicate the interface as an HA management interface. This option is only available for IPv4 policies.

    Change Note

    Add a description of the changes being made to the policy. This field is required.
  6. Click OK to create the policy. You can select to enable or disable the policy in the right-click menu. When disabled, a disabled icon will be displayed in the Seq.# column to the left of the number. By default, policies will be added to the bottom of the list, but above the implicit policy.

Create a new local-in policy

The section describes how to create new IPv4 and IPv6 local-in policies to control inbound traffic that is going to a FortiGate interface.

See Local-in policy in the FortiOS Administration Guide for more information.

On the Policy & Objects pane, from the Tools menu, select Display Options, and then select the IPv4 Local In Policy and IPv6 Local In Policy checkboxes to display these options.

To create a new Local-In policy:
  1. If using ADOMs, ensure that you are in the correct ADOM.
  2. Go to Policy & Objects > Policy Packages.
  3. In the tree menu for the policy package in which you will be creating the new policy, select IPv4 Local In Policy or IPv6 Local In Policy.
  4. Click Create New.
  5. Enter the following information:

    Option

    Description

    Interface

    Select the interface.

    Source Address

    Select souce addresses, address groups, virtual IPs, and virtual IP groups.

    Destination Address

    Select destination addresses, address groups, virtual IPs, and virtual IP groups.

    Service

    Select services and service groups.

    Schedule

    Select a one-time schedule, recurring schedule, or schedule group.

    Action

    Select an action for the policy to take: DENY or ACCEPT.

    HA Management Interface Only

    Enable to dedicate the interface as an HA management interface. This option is only available for IPv4 policies.

    Change Note

    Add a description of the changes being made to the policy. This field is required.
  6. Click OK to create the policy. You can select to enable or disable the policy in the right-click menu. When disabled, a disabled icon will be displayed in the Seq.# column to the left of the number. By default, policies will be added to the bottom of the list, but above the implicit policy.