! PermitANY — Fortinet FortiGate Firewall Policies
! FortiGate security policy configuration with address objects, service objects, UTM profiles, and IPv4 firewall policies.
! Generated: 2026-09-20
! These are EXAMPLE values. Replace with your actual config before deploying.
!
# FortiGate Firewall Policies — FGT-EDGE-01
!
config firewall address

    edit "Corp-LAN"
        set type ipmask
        set subnet 192.168.0.0 255.255.0.0
        set comment "Corporate LAN"
    next

end
!
config firewall addrgrp

    edit "GRP-SERVERS"
        set member Web-Server App-Server
    next

end
!
config firewall policy

    edit 10
        set name "Allow-LAN-to-WAN"
        set srcintf "port2"
        set dstintf "port1"
        set srcaddr "Corp-LAN"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
        set nat enable
        set logtraffic all

        set av-profile "default"


        set ips-sensor "default"


        set webfilter-profile "default"


        set application-list "default"

    next

end