Review a FortiGate configuration

Define the review scope

Identify the model, FortiOS version, sites, interfaces and relevant services. Keep a configuration backup and record business needs before deciding whether a rule or access is required.

Check example

Select a representative application flow or VPN. Compare the need with the rule, routing and observed logs, then record an authorized test result. Prepare changes separately with acceptance and rollback criteria.

Useful evidence

1. Configuration version and backup, linked to the review record.
2. Findings table, completed tests, decisions and change owner.