Fortinet black logo

Cookbook

Installing policy packages

6.2.0
Copy Link
Copy Doc ID 2d0f1673-0a61-11ea-8977-00505692583a:719821
Download PDF

Installing policy packages

Install the policy packages on the hub and branch FortiGates.

To install a policy package:
  1. Go to Policy & Objects > Policy Packages.
  2. In the toolbar, click Install > Install Wizard.
  3. Follow the steps in the install wizard to install the policy package.

For information about installing policy packages, go to the FortiManager Document Library > FortiManager Administration Guide > Firewall Policy & Objects > Managing policy packages > Install a policy package.

Note

After the policies are installed on the devices, FortiManager may make the following modifications to the FortiGate configurations:

  • The tunnel-search property will no longer be set to nexthop on the spokes.
  • The auto-discovery-sender and auto-discovery-receiver properties will no longer be enabled on the hub and spokes

You can use the GUI or scripts to correct the configuration; however, you should first complete the following step, Configuring tunnel interfaces and dynamic mapping

To verify the policy packages were installed in the GUI:
  1. Go to Device Manager > Device & Groups.
  2. In the tree menu, click Managed Devices. In the Policy Package Status column, a check mark appears next to the package you installed.

Installing policy packages

Install the policy packages on the hub and branch FortiGates.

To install a policy package:
  1. Go to Policy & Objects > Policy Packages.
  2. In the toolbar, click Install > Install Wizard.
  3. Follow the steps in the install wizard to install the policy package.

For information about installing policy packages, go to the FortiManager Document Library > FortiManager Administration Guide > Firewall Policy & Objects > Managing policy packages > Install a policy package.

Note

After the policies are installed on the devices, FortiManager may make the following modifications to the FortiGate configurations:

  • The tunnel-search property will no longer be set to nexthop on the spokes.
  • The auto-discovery-sender and auto-discovery-receiver properties will no longer be enabled on the hub and spokes

You can use the GUI or scripts to correct the configuration; however, you should first complete the following step, Configuring tunnel interfaces and dynamic mapping

To verify the policy packages were installed in the GUI:
  1. Go to Device Manager > Device & Groups.
  2. In the tree menu, click Managed Devices. In the Policy Package Status column, a check mark appears next to the package you installed.