Fortinet FortiGate 4000 Betriebsanweisung

Select the position for the policy.

Select OK.

Disable a policy to temporarily prevent the firewall from selecting the policy. Disabling 
a policy does not stop active communications sessions that have been allowed by the 
policy.

Go to Firewall > Policy.

Clear the Enable check box beside the policy you want to disable.

Go to Firewall > Policy.

Select Enable.

The natip keyword for the firewall policy command is used in encrypted 

(VPN) policies. A natip address cannot be added using the web-based manager. You 
can configure complete firewall policies using from the CLI. See the FortiGate CLI 
Reference Guide for descriptions of all firewall policy keywords.

config firewall policy

edit <id_integer>

set <keyword> <variable>

end

Note: This command has more keywords than are listed in this Guide. See the FortiGate CLI 
Reference Guide for a complete list of commands and keywords.