Export a policy package

You can export a policy package to a CSV file.

To export a policy package:

1. Select the specific ADOM that contains the policy package you are exporting from the drop-down list in the toolbar.
2. Right-click on a policy package or folder in the Policy Package
3. Under the Policy Package heading in the menu, select Export.
4. If prompted by your web browser, select a location to where save the file, or open the file without saving.

Policy packages are exported as CSV files.

Edit the installation targets for a policy package

To edit a policy package’s installation targets:

1. Select the ADOM that contains the policy package whose installation target you are editing from the drop-down list in the toolbar.
2. Select the name of the policy package from the list, then select the Installation tab in the policy package toolbar.
3. Select Add in the toolbar. The Add Installation Target dialog box opens.

Add installation target

4. Adjust the installation targets as required, then select OK.

Perform a policy consistency check

The policy check tool allows you to check all policy packages within an ADOM to ensure consistency and eliminate conflicts that may prevent your devices from passing traffic. This allows you to optimize your policy sets and potentially reduce the size of your databases.

The check will verify:

• Object duplication: two objects that have identical definitions l Object shadowing: a higher priority object completely encompasses another object of the same type l Object overlap: one object partially overlaps another object of the same type l Object orphaning: an object has been defined but has not been used anywhere.

The policy check uses an algorithm to evaluate policy objects, based on the following attributes:

• The source and destination interface policy objects l The source and destination address policy objects l The service and schedule policy objects.

To perform a policy check:

1. Select the ADOM that you will be performing the consistency check on from the drop-down list in the toolbar.
2. Right-click on a policy package or folder in the Policy Package
3. Under the Policy Package heading, select Policy Check. The Consistency Check dialog box opens.

Consistency check dialog box

4. To perform a new consistency check, select Perform Policy Consistency Check, then select Apply.

A policy consistency check is performed, and the results screen is shown.

Consistency check results window

To view the results of the last policy consistency check:

1. Select the ADOM that you previously performed a consistency check in from the drop-down list in the toolbar.
2. Right-click on a policy package or folder in the Policy Package
3. Under the Policy Package heading in the menu, select Policy Check. The Consistency Check dialog box opens.
4. To view the results of the most recent consistency check, select View Last Policy Consistency Check Results, then select Apply.

The Consistency Check window opens, showing the results of the last policy consistency check. See Consistency check results window.

Policy search

Use the search field in the Policy & Objects tab to search policies for matching rules or objects. Entering text in the search field will highlight matches.

Policy search example

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!