Fortinet FortiGate 1U, Быстрый старт

Страница: 96 / 272

76 The FortiGate Cookbook 5.0.
Adding a device identity
security policy
Go to Policy > Policy > Policy .
Create a new policy, setting the Policy
Subtype to Device Identity . Set the
Incoming Interface to the wireless
interface used for BYOD connections and
set the
Outgoing Interface as the Internet-
facing interface.
Create a new authentication rule that
includes the wireless devices and the new
schedule.
Results
Go to Log & Report > Traffic Log >
Forward Traffic . When a mobile user
connects during the lunch break, they can
surf the Internet, as shown in the logs.
When the time in the schedule is reached,
further sur
fi ng cannot continue. This does
not appear in the logs, as only allowed traf fi c
is logged.
Evidence that the schedule and policy are
working appears when attempting to connect
to a website, and possibly a few questions
from the BYOD users.