Fortinet FortiGate Series Administration Manual page 402

Hide thumbs Also See for FortiGate Series:

Table of Contents

Configuring firewall policies

Enable Identity Based

To create an identity based firewall policy, select the Enable Identity Based Policy check

box. A table opens below the check box. Select Add. The New Authentication Rule dialog

Figure 214: New Authentication Rule

Available User Groups List of user groups available for inclusion in the firewall policy. To add

Selected User Groups List of user groups that are included in the firewall policy. To remove a

Enable or disable Network Address Translation (NAT) of the source

address and port of packets accepted by the policy. When NAT is

enabled, you can also configure Dynamic IP Pool and Fixed Port.

If you select a virtual IP as the Destination Address, but do not select

the NAT option, the FortiGate unit performs destination NAT (DNAT)

rather than full NAT. Source NAT (SNAT) is not performed.

Select Fixed Port to prevent NAT from translating the source port.

Select to configure a SSL-VPN firewall policy that requires

authentication.

Select to configure the valid authentication methods, user group

names, and services. For more information, see

Add information about the policy. The maximum length is 63

a user group to the list, select the name and then select the Right

user group from the list, select the name and then select the Left

FortiGate Version 4.0 MR1 Administration Guide

Firewall Policy

"User Group" on

01-410-89802-20090903

http://docs.fortinet.com/