Fortinet fortigate-200a Betriebsanweisung

Seite von 392
198
01-28006-0072-20041105
Fortinet Inc.
Policy
Firewall
.
Comments
You can add a description or other information about the policy. The comment can be 
up to 63 characters long, including spaces.
Configuring firewall policies
Use the following procedures to add, delete, edit, re-order, disable, and enable a 
firewall policy.
To add a firewall policy
1
Go to Firewall > Policy.
2
Select Create New.
You can also select the Insert Policy before icon beside a policy in the list to add the 
new policy above that policy.
3
Select the source and destination interfaces.
4
Select the source and destination addresses.
5
Configure the policy.
For information about configuring the policy, se
6
Select OK to add the policy.
7
Arrange policies in the policy list so that they have the results that you expect.
For information about arranging policies in a policy list, see 
To delete a policy
1
Go to Firewall > Policy.
2
Select the Delete icon beside the policy you want to delete.
3
Select OK.
To edit a policy
1
Go to Firewall > Policy.
2
Select the Edit icon beside the policy you want to edit.
3
Edit the policy as required.
4
Select OK.
To change the position of a policy in the list
1
Go to Firewall > Policy.
2
Select the Move To icon beside the policy you want to move.
Original 
(forward) DSCP 
value
Set the DSCP value for packets accepted by the policy. For example, for an 
Internal
->
External policy the value is applied to outgoing packets as they 
exit the external interface and are forwarded to their destination.
Reverse (reply) 
DSCP value
Set the DSCP
 
value for reply packets. For example, for an 
Internal
->
External policy the value is applied to incoming reply packets 
before they exit the internal interface and returned to the originator.