Fortinet black logo

Administration Guide

Blocked hosts

Blocked hosts

If you enable blocked hosts as a global setting in General, the system enforces a configurable blocklist for all admin and users.

The Blocked Hosts tab displays the blocklist, which is a list of IP addresses that are blocked.

The blocklist is a system level feature, and it applies to SSO and SAML users.

To create blocked hosts:
  1. Go to System > Settings > Blocked Hosts.

    Select a blocked host and then click Edit to edit the blocked host.

    When editing a blocked host, the fields are the same as those that appear when creating a blocked host.

  2. In the Blocked Hosts tab, click Create.

    The Create Blocked Hosts window opens.

  3. Enter the following information:
  4. Field

    Required

    Description

    Type

    Y

    Select IPv4 or IPv6.

    IP Start

    Y

    Enter the start address for the range covered by this entry.

    Mask

    Y

    If Type is set to IPv4, define the range of IP addresses covered by this entry.

    Prefix

    Y

    If Type is set to IPv6, define the range of IP addresses covered by this entry.

  5. Click Save.

To delete one or more blocked hosts, select the hosts and click Delete.

Blocked hosts

If you enable blocked hosts as a global setting in General, the system enforces a configurable blocklist for all admin and users.

The Blocked Hosts tab displays the blocklist, which is a list of IP addresses that are blocked.

The blocklist is a system level feature, and it applies to SSO and SAML users.

To create blocked hosts:
  1. Go to System > Settings > Blocked Hosts.

    Select a blocked host and then click Edit to edit the blocked host.

    When editing a blocked host, the fields are the same as those that appear when creating a blocked host.

  2. In the Blocked Hosts tab, click Create.

    The Create Blocked Hosts window opens.

  3. Enter the following information:
  4. Field

    Required

    Description

    Type

    Y

    Select IPv4 or IPv6.

    IP Start

    Y

    Enter the start address for the range covered by this entry.

    Mask

    Y

    If Type is set to IPv4, define the range of IP addresses covered by this entry.

    Prefix

    Y

    If Type is set to IPv6, define the range of IP addresses covered by this entry.

  5. Click Save.

To delete one or more blocked hosts, select the hosts and click Delete.