Chapter 4 Authentication : Examples and Troubleshooting : RADIUS SSO example : Configuring FortiGate regular and RADIUS SSO security policies : Configuring regular security policies
  
Configuring regular security policies
Regular security policies allow or deny access for non-RADIUS SSO traffic. This is essential as there are network services—such as DNS, NTP, and FortiGuard—that require access to the Internet.
To configure regular security policies - web-based manager
1. Go to Policy & Objects > Policy > IP4, and select Create New.
2. Enter the following information, and select OK.
Incoming Interface
Internal
Source Address
internal_network
Outgoing Interface
wan1
Destination Address
all
Schedule
always
Service
essential_network_services
Action
ACCEPT
NAT
ON
Security Profiles
ON: AntiVirus, IPS
Log Allowed Traffic
ON
Comments
Essential network services
3. Select Create New, enter the following information, and select OK.
Incoming Interface
dmz
Source Address
company_servers
Outgoing Interface
wan1
Destination Address
all
Schedule
always
Service
essential_server_services
Action
ACCEPT
NAT
ON
Security Profiles
ON: AntiVirus, IPS
Log Allowed Traffic
enable
Comments
Company servers accessing the Internet
4. Select Create New, enter the following information, and select OK.
Incoming Interface
Internal
Source Address
internal_network
Outgoing Interface
dmz
Destination Address
company_servers
Schedule
always
Service
all
Action
ACCEPT
NAT
ON
Security Profiles
ON: AntiVirus, IPS
Log Allowed Traffic
enable
Comments
Access company servers