Fortinet FortiGate

FortiOS next-generation firewall with flow-based inspection and an implicit deny policy.

Provider: default
Kind: Firewall
Category: Security
Official docs: https://docs.fortinet.com/document/fortigate/8.0.0/administration-guide/216765/implicit-rule

Properties · 4 set by this component

property	type	values	required	kind default	this component
defaultAction	enum	allow \| deny	no	—	▸ deny
formFactor · component property	enum	hardware \| virtual-machine \| cloud	no	hardware	inherited
haCluster · component property	boolean	—	no	false	inherited
inspectionMode · component property	enum	flow-based \| proxy-based	no	flow-based	inherited
intrusionPrevention	boolean	—	no	—	▸ false
logging	boolean	—	no	—	inherited
managed	boolean	—	no	false	▸ false
ruleCount	integer	—	no	—	inherited
securityProfiles · component property	boolean	—	no	false	inherited
stateful	boolean	—	no	—	▸ true

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "fortigate", component: "fortigate" }

Other Firewall products · 35

Cloud Firewallalibaba-cloud-firewallalibabacloudfirewall Network ACLalibaba-network-aclalibabacloudfirewall ECS Security Groupalibaba-security-groupalibabacloudfirewall Network ACLaws-network-aclawsfirewall AWS Network Firewallaws-network-firewallawsfirewall Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewall Security groupaws-security-groupawsfirewall Microsoft Entra Internet Accessazure-entra-internet-accessazurefirewall Azure Firewallazure-firewallazurefirewall Network Security Groupazure-network-security-groupazurefirewall Network security perimeterazure-network-security-perimeterazurefirewall Cloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewall Cloudflare Gatewaycloudflare-gatewaycloudflarefirewall Cloudflare Network Firewallcloudflare-network-firewallcloudflarefirewall Generic firewallfirewallfirewall Firewall appliancefirewall-appliancefirewall MikroTik RouterOSmikrotik-routerosfirewall nftablesnftablesfirewall OPNsenseopnsensefirewall Palo Alto Networks NGFWpalo-alto-ngfwfirewall pfSensepfsensefirewall Snortsnortfirewall Suricatasuricatafirewall VyOSvyosfirewall DigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewall Cloud IDSgoogle-cloud-idsgcpfirewall Cloud NGFWgoogle-cloud-ngfwgcpfirewall Secure Web Proxygoogle-secure-web-proxygcpfirewall IBM Cloud Hardware Firewallibm-firewallibmfirewall VPC Security Groupibm-security-groupibmfirewall NetworkPolicyk8s-network-policyk8sfirewall Network Firewalloci-network-firewallocifirewall Network Security Groupoci-network-security-groupocifirewall Security Listoci-security-listocifirewall Security Groupoutscale-security-groupoutscalefirewall

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Fortinet FortiGate (FortiOS): NGFW appliance. The "Implicit rule" and "Firewall policy"
3# guides state traffic matching no policy hits the implicit deny policy and is dropped;
4# inspection is stateful and the per-policy inspection mode defaults to flow-based.
5# IPS is a separate security profile that must be attached to a policy.
6schemaVersion: "1"
7type: "component"
8id: "fortigate"
9kind: "firewall"
10provider: "default"
11docs: "https://docs.fortinet.com/document/fortigate/8.0.0/administration-guide/216765/implicit-rule"
12defaults:
13  managed: false
14  defaultAction: "deny"
15  stateful: true
16  intrusionPrevention: false
17properties:
18  inspectionMode:
19    type: "enum"
20    values: ["flow-based", "proxy-based"]
21    default: "flow-based"
22  formFactor:
23    type: "enum"
24    values: ["hardware", "virtual-machine", "cloud"]
25    default: "hardware"
26  securityProfiles:
27    type: "boolean"
28    default: false
29  haCluster:
30    type: "boolean"
31    default: false

The same page as markdown, for an agent: /catalogue/components/fortigate.md