Factory Default Firewall Configuration - Fortinet FortiGate FortiGate-800 Installation And Configuration Manual

Factory default FortiGate configuration settings

Factory default firewall configuration

32
Table 3: Factory default Transparent mode network configuration (Continued)
Management access
The factory default firewall configuration is the same in NAT/Route and Transparent
mode.
Table 4: Factory default firewall configuration
Internal
Internal_All
Address
External
External_All
Address
DMZ
DMZ_All
Address
Recurring Always
Schedule
Firewall Internal->External
Policy
Source
Destination External_All
Schedule
Service
Action
NAT
Traffic Shaping
Internal
External
DMZ
Interface 1
Interface 2
Interface 3
Interface 4
IP: 0.0.0.0 Represents all of the IP addresses on the internal
network.
Mask: 0.0.0.0
IP: 0.0.0.0 Represents all of the IP addresses on the external
network.
Mask: 0.0.0.0
IP: 0.0.0.0 Represents all of the IP addresses on the DMZ
network.
Mask: 0.0.0.0
The schedule is valid at all times. This means that
the firewall policy is valid at all times.
Firewall policy for connections from the internal
network to the external network.
Internal_All The policy source address. Internal_All means that
the policy accepts connections from any internal IP
address.
The policy destination address. External_All means
that the policy accepts connections with a
destination address to any IP address on the
external network.
Always The policy schedule. Always means that the policy
is valid at any time.
ANY The policy service. ANY means that this policy
processes connections for all services.
ACCEPT The policy action. ACCEPT means that the policy
allows connections.
NAT is selected for the NAT/Route mode default
policy so that the policy applies network address
translation to the traffic processed by the policy.
NAT is not available for Transparent mode policies.
Traffic shaping is not selected. The policy does not
apply traffic shaping to the traffic controlled by the
policy. You can select this option to control the
maximum or minimum amount of bandwidth
available to traffic processed by the policy.
Getting started
HTTPS, Ping
Ping
HTTPS, Ping
Ping
Ping
Ping
Ping
Fortinet Inc.