Fortinet black logo

Administration Guide

Installing Policy Blocks to target devices

Installing Policy Blocks to target devices

To install Policy Blocks to targets using Install On:
  1. Go to Policy & Objects > Policy Packages.
  2. From the Tools menu, select Feature Visibility, and enable Policy Block.
  3. Install from the Policy Blocks menu:
    1. Select a Policy Block from the tree menu.
    2. Click the edit icon in the Install On column.
    3. Select the target device(s) for installation. You can select any installation targets.
  4. Install from the Policy Package:
    1. Go to a Policy Package where the Policy Block is installed, and select the Policy Block.
    2. Click the edit icon in the Install On column.
    3. Select the target device(s) for installation. You can select any installation targets, including ones not assigned to the Policy Package's installation targets.
  5. Click Apply, and install the Policy Block using Installation Targets. In the example below, Policy a1, a4, and a5 are installed.

    Below is the example copy log:

    config firewall policy

    edit 1071741825

    set name "pb1-a1"

    set uuid 0722adfadea-729d-51ee-0fad-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    edit 1071741834

    set name "pb1-a4"

    set uuid 99adsfadsf34e-7375-51ee-c3a4-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    edit 1071741835

    set name "pb1-a5"

    set uuid 9ffdca46-7375-51ee-ca51-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    end

Installing Policy Blocks to target devices

To install Policy Blocks to targets using Install On:
  1. Go to Policy & Objects > Policy Packages.
  2. From the Tools menu, select Feature Visibility, and enable Policy Block.
  3. Install from the Policy Blocks menu:
    1. Select a Policy Block from the tree menu.
    2. Click the edit icon in the Install On column.
    3. Select the target device(s) for installation. You can select any installation targets.
  4. Install from the Policy Package:
    1. Go to a Policy Package where the Policy Block is installed, and select the Policy Block.
    2. Click the edit icon in the Install On column.
    3. Select the target device(s) for installation. You can select any installation targets, including ones not assigned to the Policy Package's installation targets.
  5. Click Apply, and install the Policy Block using Installation Targets. In the example below, Policy a1, a4, and a5 are installed.

    Below is the example copy log:

    config firewall policy

    edit 1071741825

    set name "pb1-a1"

    set uuid 0722adfadea-729d-51ee-0fad-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    edit 1071741834

    set name "pb1-a4"

    set uuid 99adsfadsf34e-7375-51ee-c3a4-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    edit 1071741835

    set name "pb1-a5"

    set uuid 9ffdca46-7375-51ee-ca51-*************

    set srcintf "any"

    set dstintf "any"

    set srcaddr "all"

    set dstaddr "all"

    set schedule "always"

    set service "ALL"

    set logtraffic all

    next

    end