Fortinet black logo

Administration Guide

Home FortiManager 7.0.8 Administration Guide
7.0.8
7.4.2
7.4.1
7.4.0
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.6
6.2.5
6.2.3
6.2.2
6.2.1
6.2.0
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.6.11
5.6.10
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.6.4
5.6.3
5.6.2
5.6.1
5.6.0
5.4.7
5.4.6
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4.0
5.2.10
5.2.7
5.2.6
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0

Creating policy packages

Creating policy packages

Create a policy package with selected objects.

Note

NGFW mode is not supported for global policy packages.
To create a policy package:
  1. Change the ADOM to Global Database.
  2. Click Policy Packages.
  3. Select Policy Package > New Package.
  4. Specify a name for the policy package in the Name field.
  5. Select the folder where the policy package is to be saved. Click OK.
  6. Click the newly created policy package.
  7. Go to Firewall Header Policy and click Create New.
  8. Configure the IPv4 Header Policy and click OK. For more information, see IP policies.
  9. Go to Firewall Footer Policy and click Create New.
  10. Configure the IPv4 Footer Policy and click OK. For more information, see IP policies.
Tooltip

Importing configs with global policies

When re-importing a managed device's configuration, global policies and objects that are installed on the device will not be re-imported, and the following error will be displayed: The global header/footer policies will not be imported. Global policy and objects can not be retrieved from a managed device.

When a global policy package is unassigned from a device, you must perform an install to the target device to remove the global policies and objects.
Previous
Next

Creating policy packages

Create a policy package with selected objects.

Note

NGFW mode is not supported for global policy packages.
To create a policy package:
  1. Change the ADOM to Global Database.
  2. Click Policy Packages.
  3. Select Policy Package > New Package.
  4. Specify a name for the policy package in the Name field.
  5. Select the folder where the policy package is to be saved. Click OK.
  6. Click the newly created policy package.
  7. Go to Firewall Header Policy and click Create New.
  8. Configure the IPv4 Header Policy and click OK. For more information, see IP policies.
  9. Go to Firewall Footer Policy and click Create New.
  10. Configure the IPv4 Footer Policy and click OK. For more information, see IP policies.
Tooltip

Importing configs with global policies

When re-importing a managed device's configuration, global policies and objects that are installed on the device will not be re-imported, and the following error will be displayed: The global header/footer policies will not be imported. Global policy and objects can not be retrieved from a managed device.

When a global policy package is unassigned from a device, you must perform an install to the target device to remove the global policies and objects.
Previous
Next