Policy Cli Configuration - Fortinet FortiGate FortiGate-3600 Administration Manual

Firewall

Policy CLI configuration

FortiGate-3600 Administration Guide
3 Select the position for the policy.
4 Select OK.
To disable a policy
Disable a policy to temporarily prevent the firewall from selecting the policy. Disabling
a policy does not stop active communications sessions that have been allowed by the
policy.
1 Go to Firewall > Policy.
2 Clear the Enable check box beside the policy you want to disable.
To enable a policy
1 Go to Firewall > Policy.
2 Select Enable.
The natip keyword for the firewall policy command is used in encrypted
(VPN) policies. A natip address cannot be added using the web-based manager. You
can configure complete firewall policies using from the CLI. See the FortiGate CLI
Reference Guide for descriptions of all firewall policy keywords.
Note: This command has more keywords than are listed in this Guide. See the FortiGate CLI
Reference Guide for a complete list of commands and keywords.
Command syntax pattern
config firewall policy
edit <id_integer>
set <keyword> <variable>
end
01-28006-0011-20041105
Policy
201