NSE4 · Question #86
The order of the firewall policies is important. Policies can be re-ordered from either the GUI or the CLI. Which CLI command is used to perform this function?
The correct answer is D. move. In FortiGate CLI, the move command within the config firewall policy context is used to change the processing order of firewall policies.
Question
The order of the firewall policies is important. Policies can be re-ordered from either the GUI or the CLI. Which CLI command is used to perform this function?
Options
- Aset order
- Bedit policy
- Creorder
- Dmove
How the community answered
(25 responses)- A4% (1)
- C8% (2)
- D88% (22)
Why each option
In FortiGate CLI, the `move` command within the `config firewall policy` context is used to change the processing order of firewall policies.
`set order` is not a valid command for reordering policies; `set` is used for modifying parameters within a policy.
`edit policy` is used to enter the configuration mode for a specific policy, not to change its position in the policy list.
`reorder` is not a standard CLI command for changing the policy sequence in FortiGate.
The `move` command, used within the `config firewall policy` section of the FortiGate CLI, allows administrators to reposition a specific policy (identified by its ID) to a new order, such as before, after, or to a specific position relative to other policies.
Concept tested: FortiGate CLI firewall policy reordering
Source: https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/64367/config-firewall-policy
Topics
Community Discussion
No community discussion yet for this question.