Firewall Policy in FortiGate Firewall

In Fortigate firewalls, a firewall policy is a rule that specifies how network traffic should be handled. Firewall policies are used to control the flow of traffic between different network segments, and to enforce security policies and access controls.

Firewall policies in Fortigate firewalls consist of several components, including:

1. Policy name: A descriptive name for the firewall policy.

2. Source and destination addresses: The source and destination IP addresses or subnets of the traffic to be filtered by the policy.

3. Service: The type of traffic (e.g. HTTP, FTP, SSH, etc.) to be filtered by the policy.

4. Action: The action to be taken when traffic matches the policy (e.g. allow, deny, quarantine, etc.).

5. Logging: Whether or not traffic that matches the policy should be logged.

Firewall policies in Fortigate firewalls are evaluated from top to bottom, and the first policy that matches the traffic is applied. If no policy matches the traffic, the default policy is applied.

To create a firewall policy in Fortigate firewall, the following steps can be followed:

1. Access the Fortigate firewall's web interface and go to the Policy & Objects section.

2. Click on the Firewall option to view the list of configured firewall policies.

3. Click on the Add button to create a new firewall policy.

4. In the Add Firewall Policy window, enter the source and destination addresses, service, action, and logging options for the policy.

5. Click on OK to save the firewall policy configuration.

Overall, firewall policies are an essential component of network security in Fortigate firewalls. They provide granular control over the flow of traffic between different network segments and help enforce security policies and access controls.