Technical Tip: FQDN object is not seen on the FortiGate with hyperscale enabled

FQDN objects are not supported in the Hyperscale Firewall policy. However, only the VDOM with Hyperscale enabled is affected.

Enable the Hyperscale firewall features for FortiGate:

config global

    config system np

        set policy-offload-level full-offload 

    end

FQDN object still can be used in the Firewall Policy:

Enable full-offload to specific VDOM:

config vdom

    edit test-hw

        config system setting

            set policy-offload-level full-offload

        end

FQDN objects are not selectable on the firewall policy. Other firewall address that are not selectable on Hyperscale Firewall include Device(MAC Address) and Dynamic.