nerdexam
Fortinet

NSE4 · Question #86

The order of the firewall policies is important. Policies can be re-ordered from either the GUI or the CLI. Which CLI command is used to perform this function?

The correct answer is D. move. In FortiGate CLI, the move command within the config firewall policy context is used to change the processing order of firewall policies.

Submitted by tyler.j· Apr 18, 2026Firewall Policies and Authentication

Question

The order of the firewall policies is important. Policies can be re-ordered from either the GUI or the CLI. Which CLI command is used to perform this function?

Options

  • Aset order
  • Bedit policy
  • Creorder
  • Dmove

How the community answered

(25 responses)
  • A
    4% (1)
  • C
    8% (2)
  • D
    88% (22)

Why each option

In FortiGate CLI, the `move` command within the `config firewall policy` context is used to change the processing order of firewall policies.

Aset order

`set order` is not a valid command for reordering policies; `set` is used for modifying parameters within a policy.

Bedit policy

`edit policy` is used to enter the configuration mode for a specific policy, not to change its position in the policy list.

Creorder

`reorder` is not a standard CLI command for changing the policy sequence in FortiGate.

DmoveCorrect

The `move` command, used within the `config firewall policy` section of the FortiGate CLI, allows administrators to reposition a specific policy (identified by its ID) to a new order, such as before, after, or to a specific position relative to other policies.

Concept tested: FortiGate CLI firewall policy reordering

Source: https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/64367/config-firewall-policy

Topics

#Firewall policies#CLI commands#Policy reordering

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice