Web UI and CLI Overview
How to set up your FortiWAN
Basic concept to configure via Web UI
FortiWAN's services (load balancing, fault tolerance and other optional services) are based on Policy and Filter.
Policies (or called Classes as well) are specified items indicating different actions for a service. Policies are applied to
different objects classified by the predefined filters. Basically, a object is classified by the combinations of When,
Source, Destination and TCP/UDP/ICMP Service. A filter contains the settings of those items When, Source,
Destination and Service, and also an associated Policy. Traffic that matches the filter will be applied to the specified
policy.
The common operation buttons
FortiWAN manages most of its rules/filters/policies with top-down evaluation method where the rules are prioritized in
descending order.
Click this button, to add a new rule below the current rule.
Click this button, to delete the rule.
Click this button, to move the rule up a row.
Click this button, to move the rule down a row.
Write a note for this rule.
The function is disabled.
The function is enabled.
Configuration on When
This is for filtering traffic by different time period which is predefined in "
".
Configuration on Source and Destination
This is for filtering the established sessions from/to specified source/destination. The options are:
IPv4/IPv6 Address
:
Matches sessions coming from or going to a single IPv4/IPv6 address. e.g.
192.168.1.4.
IPv4/IPv6 Range
:
Matches sessions coming from or going to a continuous range of IP addresses.
e.g. 192.168.1.10-192.168.1.20.
IPv4/IPv6 Subnet
:
Matches sessions coming from or going to a subnet.
e.g.192.168.1.0/255.255.255.0.
WAN
:
Matches sessions coming from or going to WAN.
FortiWAN Handbook
Fortinet Technologies Inc.
37
