Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Configure FortiGate 60D to Allow ALL traffic to a specific destination

Posted on 2016-08-23
6
Medium Priority
?
108 Views
Last Modified: 2016-09-05
Hi,

I have a fortinet firewall device which Ive inherited which needs a firewall added so all traffic from a specific address as full access in and out. Does anyone on EE have any experience with this firewall?

Thanks in advance
SycamoreIT
0
Comment
Question by:SycamoreIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 22

Accepted Solution

by:
Jakob Digranes earned 2000 total points
ID: 41767468
should be fairly easy. Log in - go to policy and object. create an address object for the IP-address. Choose interface any and subnet mask 255.255.255.255

then go to policy - choose NEW and create and from INTERFACE (which is the interface where the specific address is located, like for instance LAN) - and address object as FROM address. Then choose DESTINATION interface and address ANY. Service choose ANY and schedule - ANY
If needed, add NAT to rule. If you need traffic to go to internet or simply needs NATing
0
 

Author Comment

by:SycamoreIT
ID: 41770159
Hi Jakob,

This is what I have so far. Not sure if the Incoming interface is correct? Im setting up a rule for our IP phones which are on our local lan so will "any" do for this option? In source Address, Ive select a predefined group which covers our local lan, outgoing interface, Ive selected our Virgin Line, Destination ive inserted the IP address we want our phones to connect to and thats as far as I got.

Can you advise please?
experts.png
0
 
LVL 22

Expert Comment

by:Jakob Digranes
ID: 41776112
You need to Enable NAT
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:SycamoreIT
ID: 41777885
Hi Jakob,

I have implented the above, how can I test if its working?

Ta
SycamoreIT
0
 
LVL 22

Expert Comment

by:Jakob Digranes
ID: 41777913
you could perhaps connect a computer within that address range, and do a telnet to servers you want to reach
0
 

Author Closing Comment

by:SycamoreIT
ID: 41784316
Thanks
0

Featured Post

Are You Ready for GDPR?

With the GDPR deadline set for May 25, 2018, many organizations are ill-prepared due to uncertainty about the criteria for compliance. According to a recent WatchGuard survey, a staggering 37% of respondents don't even know if their organization needs to comply with GDPR. Do you?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
Suggested Courses

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question