Fortigate – Policy lookup

Tests

is there someone listening

netstat -an | findstr 0.0.0.0:80
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
UDP 0.0.0.0:80 *:*

Powershell port test

Test-NetConnection -ComputerName "10.55.113.101" -Port 80 -InformationLevel "Detailed"

Lookup soure interface

get router info routing-table details 10.255.2.250

Lookup the policy

diagnose firewall iprope lookup 10.255.2.250 30000 10.137.2.104 80 tcp port1
matches policy id: 1039431

The policy

show firewall policy 1039431
config firewall policy
  edit 1039431
    set srcintf "any"
    set dstintf "any"
    set srcaddr "N.10.255.2.224--27"
    set dstaddr "N.10.0.0.0--8"
    set action accept
    set schedule "always"
    set service "ALL"
    set logtraffic all
    set logtraffic-start enable
  next
end

Photo by Taylor Vick on Unsplash