FGTENT-008 Prefix List | FortiGate Firewall Configuration Step by Step
In the previous videos, we intentionally allowed routes to flow freely between the Data Center (DC), Disaster Recovery (DR), and ISPs — and as expected, things started to get messy.
In this video, we fix that mess.
You’ll learn why BGP prefix lists are essential, how uncontrolled route advertisement can create operational pain, and how prefix lists bring clarity, control, and predictability back into your network.
This video focuses purely on understanding and implementing prefix lists, before we move on to route-maps in the next session.
🔍 What You’ll Learn
Why unrestricted BGP advertisements are dangerous
What a BGP prefix list really does (beyond the definition)
How prefix lists control:
Incoming routes
Outgoing route advertisements
Prefix list logic: permit, deny, and sequence numbers
Real-world DC–DR–ISP prefix list design
How prefix lists reduce routing complexity and mistakes
🧠 Why This Matters
In real enterprise networks, BGP without filtering is not acceptable.
Prefix lists are the first line of defense before:
Route-maps
AS-path manipulation
Local preference tuning
Traffic engineering
Understanding prefix lists properly will make everything else in BGP much easier.
🎯 What’s Next
Video 09: BGP Route Maps – controlling routes with precision
Local Preference & Path Selection
DC–DR traffic engineering
Branch & ADVPN integration
👍 If this helped you
Like the video
Subscribe for upcoming enterprise-level FortiGate content
Comment if you want to see specific BGP scenarios
#FortiGate
#BGP
#PrefixList
#BGPFiltering
#Routing
#NetworkEngineering
#NetworkSecurity
#EnterpriseNetworking
#Fortinet
#Firewall
#DC_DR
#ISPConnectivity
#RoutingPolicy
#TrafficEngineering
#networkdesign
#JDLAB_SEC #FortiGate #NetworkSecurity #EVE_NG #FirewallLab #Cisco #Routing #BGP SDWAN
#VPN #CyberSecurity #Networking #ITLab #networkengineering #fortigate #firewall #configuration #stepbystep #fortinet #basiconfiguration #beginners #beginner #tutorial #tutorials #tipsandtricks #tipsandtrick #tips #configure #sslvpn #ipsec #fortiap #fortiswitch #fortilink #igorotech #free #version7 #version #latest #stepbystep #configurefortigate #setup #fortigatesetup #setupfortigate #howto #configure #ipsecvpnconfigurationtutorial #fortigateipsecvpn #fortinetipsecvpn #howtoconfiguresitetositevpnonfortigate #howtoconfiguresitetositevpnonfortigatefirewall #howtoconfiguresitetositevpnonfirewall #howtoconfiguresitetositevpnonfortiniet #sitetositevpnconfiguration #fortigatesitetositevpn #howtoconfigureipsecvpnonazure #howtoconfigureipsecvpnoncisco #howtoconfigureipsecvpnonciscofirewall #howtoconfigureipsecvpnonciscorouter #howtoconfigureipsecvpnonciscomeraki #howtoconfigureipsecvpnonsophos #howtoconfigureipsecvpnonsophosfirewall #howtoconfigureipsecvpnonpaloalto #howtoconfigureipsecvpnonpaloaltofirewall #howtoconfigureipsecvpnongoogle #howtoconfigureipsecvpnongooglecloud #howtoconfigureipsecvpnonaws #awsipsecvpn #googlecloudipsecvpn #azureipsecvpn #howtoconfigureipsecvpnonmicrosoft #howtoconfigureipsecvpnonmicrosoftazure #configureipsecvpn #configuresitetositevpn #hubtospokevpn #hubtospokeipsecvpn #howtoconfigureipsecvpnonsonicwall #howtoconfigureipsecvpnoncheckpoint #howtoconfigureipsecvpnonbarracuda #howtoconfigureipsecvpnonjuniper #ciscoipsecvpn #ciscositetositevpn #sonicwallipsecvpn #sonicwallsitetositevpn #checkpointipsecvpn #checkpointsitetositevpn #barracudaipsecvpn #barracudasitetositevpn #howtoconfigureipsecvpnonsangfor #howtoconfigureipsecvpnonsangforfirewall #howtoconfigureipsecvpnontplink #howtoconfigureipsecontplinkrouter #howtoconfigureipsecvpnonrouter #howtoconfigureipsecvpnondlink #howtoconfigureipsecvpnondlinkrouter #tplinkipsecvpn #tplinksitetositevpn #dlinkipsecvpn #dlinksitetositevpn #configuration #tutorial #beginner #beginners #stepbystep #free #howtoconfigureipsecvpnonpfsense #pfsenseipsecvpn #pfsensesitetositevpn #howtoconfigureipsecvpnonhuawei #howtoconfigureipsecvpnonhuaweirouter #howtoconfigureipsecvpnonhuaweifirewall #huaweiipsecvpn #huaweisitetositevpn #router #howtoconfigureipsecvpnonngfw #ngfwsitetositevpn #howtoconfigureipsecvpnonciscosecurefirewall #cisco #ciscorouter #ciscoswitch #ciscofirewall #huawei #huaweirouter #huaweifirewall #dlink #dlinkrouter #tplink #tplinkrouter #tplinkswitch #tplinkfirewall #sonicwallfirewall #sonicwallrouter #checkpointfirewall #checkpointrouter #barracudarouter #barracudafirewall #sophos #sophosrouter #sophosfirewall #sangfor #sangforrouter #sangforfirewall #howtoconfigureipsecvpnonciscofirepower #ciscofirepower #ciscofirepoweripsecvpn #ciscofirepowersitetositevpn #juniper #juniperrouter #juniperfirewall #secure #secureremoteaccess #secureconnection #firewallsecurity #network #connection #howtoconfigureipsecvpnonvmware #vmwareipsecvpn #azuresitetositevpn #awssitetositevpn #openvpn #sslvpn #azuretofortigate #fortigatetoazure #fortigatetofortigate #fortigatetocisco #ciscotofortigate #sophostofortigate #fortigatetosophos #huaweitofortigate #fortigatetohuawei