The fortigate firewall has all firewall policies stored within the dir /data/config you can copy the gzip compress file for acrhive or delivery to auditors or for tracking. Anytime there's a change to the firewall policies, this file will be update under the /data/config directory.
NOTE: Firewall policies are held by vdom:name and type ( ipv4 or ipv6 )
You can mount a USB thumb drive and backup just the firewall policies without backing up the rest of the configuration.
A NSE ( network security expert) and Route/Switching Engineer
kfelix -----a----t---- socpuppets ---dot---com
=( $ $ )=