Exam NSE5_FMG-7.2 topic 1 question 3 discussion

Policy Check provides recommendations only on what improvements can be made—it does not perform any changes. It uses an algorithm to evaluate policy objects based on: • Source and destination interface policy objects • Source and destination address policy objects • Service and schedule policy objects Policy Check checks for: • Duplication, where two objects have identical definitions • Shadowing, where one object completely shadows another object of the same type • Overlap, where one object partially overlaps another object of the same type • Orphaning, where an object has been defined but has not been used anywhere Reference [Page 217] - https://ebin.pub/fortinet-fortimanager-study-guide-for-fortimanager-72.html

Helps you to optimize firewall rules to potentially reduce the size of policy package database.

PAGE 217