Delete a FortiGate policy and verify recovery We will remove one FortiGate deny rule and verify that traffic recovers. Two Cisco routers communicate through this FortiGate, with a return route already configured. Both destination addresses answer before the selective deny rule is applied. Rule ten blocks the first address, while the second address still matches the broad permit. The running configuration contains the selected deny rule and the later permit rule. In the firewall policy table, delete policy ten and then leave configuration mode. Check the running configuration again: policy twenty remains, and policy ten is gone. Both addresses now answer, confirming that deleting the rule restored traffic. Review the remaining rules and retest traffic whenever you remove a firewall policy.