2013/11/13

fortiget自訂firewall policy的編號

FG命令可參考設定檔內容,例如Firewall Policy規則:
(依照下例貼到console就可在web ui看到)

config firewall policy
    edit 20  -->可自訂編號
        set srcintf "port17"
        set dstintf "abc"
        set srcaddr "IP-1.2.3.4"
        set dstaddr "all"
        set action accept
        set status disable
        set schedule "always"
        set service "ALL"
        set utm-status enable
        set logtraffic all
        set av-profile "default"
        set webfilter-profile "Monitor"
        set profile-protocol-options "default"
next
end  -->Save

沒有留言: