Fortinet black logo

Administration Guide

Creating an address group

Creating an address group

To create an address group:
  1. Go to Authentication > Addresses.
  2. From the +Create New dropdown, select Address Group.

  3. Enter the following information:

    Category

    Select from the following options:

    • IPv4 Group

    • Proxy Group

    Group name

    Name of the group.

    Color

    Select Change, and from the color palette choose a color.

    Type

    For an IPv4 group, select either Group or Folder.

    For a proxy group, select either Source Group or Destination Group.

    Members of the address folders can only belong to a single address folder.

    Members

    Select +, and in Select Entries, select a member or create an address or an address group, click Close.

    Use the search bar to look for a member.

    Use the pen icon next to the member to edit it.

    Excluded members

    Enable, and select + to add members to be excluded or create addresses and address groups to be excluded, click Close.

    Note: The option is disabled by default and only available when Category is IPv4 Group.

    Static route configuration

    Enable static route configuration to allow the address group to be used in a static route.

    All the members of an address group must have static route configuration enabled.

    Note: The option is disabled by default and only available when Category is IPv4 Group.

    Comments

    Optionally, enter comments about the address group.

  4. Click OK.

Creating an address group using the CLI example

  1. Enter the following commands in the CLI console:

    config firewall addrgrp

    edit "G Suite" #The address group name.

    set uuid 1d22ff2a-fcbf-51ec-442e-9003cab1eecb

    set member "gmail.com" "wildcard.google.com"

    next

    end

Creating an address group

To create an address group:
  1. Go to Authentication > Addresses.
  2. From the +Create New dropdown, select Address Group.

  3. Enter the following information:

    Category

    Select from the following options:

    • IPv4 Group

    • Proxy Group

    Group name

    Name of the group.

    Color

    Select Change, and from the color palette choose a color.

    Type

    For an IPv4 group, select either Group or Folder.

    For a proxy group, select either Source Group or Destination Group.

    Members of the address folders can only belong to a single address folder.

    Members

    Select +, and in Select Entries, select a member or create an address or an address group, click Close.

    Use the search bar to look for a member.

    Use the pen icon next to the member to edit it.

    Excluded members

    Enable, and select + to add members to be excluded or create addresses and address groups to be excluded, click Close.

    Note: The option is disabled by default and only available when Category is IPv4 Group.

    Static route configuration

    Enable static route configuration to allow the address group to be used in a static route.

    All the members of an address group must have static route configuration enabled.

    Note: The option is disabled by default and only available when Category is IPv4 Group.

    Comments

    Optionally, enter comments about the address group.

  4. Click OK.

Creating an address group using the CLI example

  1. Enter the following commands in the CLI console:

    config firewall addrgrp

    edit "G Suite" #The address group name.

    set uuid 1d22ff2a-fcbf-51ec-442e-9003cab1eecb

    set member "gmail.com" "wildcard.google.com"

    next

    end