WEBVTT

1
00:00:00.100 --> 00:00:05.600
A FortiGate separates two networks in this practice lab.

2
00:00:21.800 --> 00:00:30.300
Verify the two connected interfaces and prove that the baseline permit policy forwards both flows.

3
00:00:40.300 --> 00:00:45.300
Create an address object for the first destination.

4
00:00:52.100 --> 00:00:57.600
Put a specific deny before the broad permit policy.

5
00:01:05.350 --> 00:01:10.850
The first probe fails and the other still succeeds.

6
00:01:27.400 --> 00:01:34.900
Change the specific policy to accept and verify that both destinations are reachable.

7
00:01:51.400 --> 00:01:57.400
Remove the outside router’s return route and check the result.

8
00:02:19.900 --> 00:02:26.400
Turn on network address translation for this permit policy, then repeat the probe.

9
00:02:33.350 --> 00:02:39.350
The outside capture shows the translated request and its reply.