Networking · Episode 31 · 2:39

Verify a FortiGate policy and source NAT

Compare how FortiGate policies handle two destinations, then verify source NAT in a packet capture.

English narration and on-screen explanations. Read the narration transcript.

Chapters and transcript times will be ready shortly. You can use the video’s Play control or open the MP4 below.

Chapters
Open MP4 · Download transcript · English captions

Narration transcript

The English narration in this video. Select a time to watch that moment.

  1. A FortiGate separates two networks in this practice lab.

  2. Verify the two connected interfaces and prove that the baseline permit policy forwards both flows.

  3. Create an address object for the first destination.

  4. Put a specific deny before the broad permit policy.

  5. The first probe fails and the other still succeeds.

  6. Change the specific policy to accept and verify that both destinations are reachable.

  7. Remove the outside router’s return route and check the result.

  8. Turn on network address translation for this permit policy, then repeat the probe.

  9. The outside capture shows the translated request and its reply.

Back to all Networking videos