WEBVTT

1
00:00:00.100 --> 00:00:07.100
We will remove one FortiGate deny rule and verify that traffic recovers.

2
00:00:07.200 --> 00:00:14.700
Two Cisco routers communicate through this FortiGate, with a return route already configured.

3
00:00:19.800 --> 00:00:26.650
Both destination addresses answer before the selective deny rule is applied.

4
00:00:42.550 --> 00:00:51.050
Rule ten blocks the first address, while the second address still matches the broad permit.

5
00:00:56.950 --> 00:01:04.450
The running configuration contains the selected deny rule and the later permit rule.

6
00:01:13.350 --> 00:01:20.850
In the firewall policy table, delete policy ten and then leave configuration mode.

7
00:01:26.800 --> 00:01:35.250
Check the running configuration again: policy twenty remains, and policy ten is gone.

8
00:01:44.400 --> 00:01:50.900
Both addresses now answer, confirming that deleting the rule restored traffic.

9
00:01:51.000 --> 00:01:58.500
Review the remaining rules and retest traffic whenever you remove a firewall policy.