95
Examine this output from a debug flow:
Why did the FortiGate drop the packet?
The next-hop IP address is unreachable.
It failed the RPF check .
It matched an explicitly configured firewall policy with the action DENY.
It matched the default implicit firewall policy.
https://kb.fortinet.com/kb/documentLink.do?externalID=13900
https://www.fortinetguru.com/2016/03/what-is-policy-id-0-and-why-lot-of-denied-traffic-on-this-policy/
Submit