move_firewall_policy
Reposition a firewall policy before or after a reference policy to correct top-down evaluation order, ensuring specific rules override broader ones.
Instructions
Move a firewall policy before or after another policy in the evaluation order.
FortiGate evaluates policies top-down and applies the first match, so a host-specific policy must sit above the broader policy it is meant to override. Newly created policies are appended at the bottom; use this tool to position them.
Parameters:
device_id: Identifier of the FortiGate device
policy_id: ID of the policy to move
position: "before" or "after"
reference_id: ID of the policy to position relative to
vdom: Virtual Domain name (optional)
Returns:
Move status
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| vdom | No | Virtual Domain | |
| position | Yes | Place the policy before or after reference_id | |
| device_id | Yes | FortiGate device identifier | |
| policy_id | Yes | Policy ID to move | |
| reference_id | Yes | Policy ID to position relative to |