Optional Services; Firewall - Fortinet FortiWAN Handbook

Firewall

Optional Services

As an edge device, FortiWAN provides other functions except the major traffic load balancing and fault tolerance.
These optional functions are helpful to manage the network in all the ways.
Firewall
This section introduces how to set up the firewall. Unlimited number of rules can be added to the firewall rule list. The
rules are prioritized from top to bottom that is rules at the top of the table will be given higher precedence over lower
ranked ones. [IPv4 Rules] and [IPv6 Rules] are for configurations of IPv4 and IPv6 respectively.
FortiWAN provides mechanisms to record, notify and analysis on events refer to the Firewall service, see "
" Reports: Firewall ".
E :
When :
Source :
Destination :
Service :
Action :
L :
FortiWAN Handbook
Fortinet Technologies Inc.
Check the box to enable the rule
Three options available: Busy hour, Idle hour and All-Time (See "
Packets sent from specified source will be matched (See "
Packets sent to a specific destination will be matched. This field is the same as the "Source"
field, except that packets are matched with specified destination (See "
The TCP/UDP service type to be matched. Select the matching criteria from publicly known
service types (e.g. FTP), or enter the port number in TCP/UDP packets and specify the range.
Type the starting port number plus hyphen "-" and then the ending port number. e.g.
"TCP@123-234" (See " Using the web UI
Choose the actions when the rule is matched: Accept: The firewall will let the matched pack-
ets pass. Deny: The firewall will drop the matched packets.
Check to enable logging. Whenever the rule is matched, the system will record the event to
the log file.
Busyhour Settings
Using the web UI
").
Optional Services
Log
" and
").
").
Using the web UI
").
215