Fortinet black logo

Administration Guide

Policy simulator

Copy Link
Copy Doc ID 1ce38eeb-8119-11eb-9995-00505692583a:374050
Download PDF

Policy simulator

The policy simulator allows users to customize information and create scenarios to be used to virtually test policies. Instead of connecting a physical device to the network at a specific time and location in order to test a policy, the Policy Simulator allows users to test policies by virtually simulating multiple host, adapter, and user combinations. The ability to reproduce complicated scenarios without being limited to the information currently available in the system provides more accurate test results for policies, such as authentication or portal.

You can test policies from the host and user view.

Host view
  1. Select Users & Hosts > Hosts.
  2. Search for the appropriate host.
  3. Select the host and either right-click or click Options.
  4. From the menu select Policy Details.
  5. Select the tab for the policy you want to test.
  6. Click Edit Test.
  7. In the Test Policy dialog, click the tabs to enter the information for each scenario you want to test.
  8. Click OK to see the matching policy and profile to verify that the policy and profiles are correctly configured.
User view
  1. Select Users & Hosts > User Accounts.
  2. Search for the appropriate user.
  3. Select the user and either right-click or click Options.
  4. From the menu select Policy Details.
  5. Select the tab for the policy you want to test.
  6. Click Edit Test.
  7. In the Test Policy dialog, click the tabs to enter the information for each scenario you want to test.
  8. Click OK to see the matching policy and profile to verify that the policy and profiles are correctly configured.

Adapter tab

Enter information for the adapter you want to use to test the policy, or click Populate from an Existing Adapter to enter an existing adapter's information. See View and search settings.

User tab

Enter information for the user you want to use to test the policy, or click Populate from an Existing User to enter an existing user's information. See Search settings.

To add or change the user or administrator group, click Group Membership.

Host tab

Enter information for the host you want to use to test policy, or click Populate from an Existing Host to enter an existing host's information. For more information, see Settings.

To add or change Host Groups, click Group Membership.

Applications tab

Add, modify, or delete application(s) you want to use to test the policy. See Application view for information about the fields in the Applications tab.

All changes are for testing purposes only, and do not affect applications in the system.

Tests tab

Enter the required antivirus software, hot fixes, and permitted operating systems to use to test the policy. Multiple entries for each category must be comma-separated.

Date & time tab

Select the day and time criteria to be used to test the policy.

Policy simulator

The policy simulator allows users to customize information and create scenarios to be used to virtually test policies. Instead of connecting a physical device to the network at a specific time and location in order to test a policy, the Policy Simulator allows users to test policies by virtually simulating multiple host, adapter, and user combinations. The ability to reproduce complicated scenarios without being limited to the information currently available in the system provides more accurate test results for policies, such as authentication or portal.

You can test policies from the host and user view.

Host view
  1. Select Users & Hosts > Hosts.
  2. Search for the appropriate host.
  3. Select the host and either right-click or click Options.
  4. From the menu select Policy Details.
  5. Select the tab for the policy you want to test.
  6. Click Edit Test.
  7. In the Test Policy dialog, click the tabs to enter the information for each scenario you want to test.
  8. Click OK to see the matching policy and profile to verify that the policy and profiles are correctly configured.
User view
  1. Select Users & Hosts > User Accounts.
  2. Search for the appropriate user.
  3. Select the user and either right-click or click Options.
  4. From the menu select Policy Details.
  5. Select the tab for the policy you want to test.
  6. Click Edit Test.
  7. In the Test Policy dialog, click the tabs to enter the information for each scenario you want to test.
  8. Click OK to see the matching policy and profile to verify that the policy and profiles are correctly configured.

Adapter tab

Enter information for the adapter you want to use to test the policy, or click Populate from an Existing Adapter to enter an existing adapter's information. See View and search settings.

User tab

Enter information for the user you want to use to test the policy, or click Populate from an Existing User to enter an existing user's information. See Search settings.

To add or change the user or administrator group, click Group Membership.

Host tab

Enter information for the host you want to use to test policy, or click Populate from an Existing Host to enter an existing host's information. For more information, see Settings.

To add or change Host Groups, click Group Membership.

Applications tab

Add, modify, or delete application(s) you want to use to test the policy. See Application view for information about the fields in the Applications tab.

All changes are for testing purposes only, and do not affect applications in the system.

Tests tab

Enter the required antivirus software, hot fixes, and permitted operating systems to use to test the policy. Multiple entries for each category must be comma-separated.

Date & time tab

Select the day and time criteria to be used to test the policy.