What command would show the active firewall policies configured on a FortiGate?

The command to display the active firewall policies configured on a FortiGate is "show firewall policies." This command is specifically designed to retrieve and display the current configuration of all firewall policies that are active in the system, allowing you to understand how traffic can be processed according to these defined rules.

Using this command provides a clear view of the order of operations and the specific actions that would be taken based on the defined policies. This is crucial for troubleshooting and verifying that the firewall is enforcing the correct security posture.

Other alternatives like "show active policies," "show firewall rules," or "list firewall policy" do not match the specific syntax used in FortiGate's CLI for querying firewall configurations. While they may seem similar, they either do not exist as valid commands or do not return the desired output, which is specifically the list of active firewall policies.