Technical Tip: How to avoid the error 'One address or address group is required' in IPv4 Policy
Description
This article describes how to avoid the error 'One address or address group is required' in IPv4 policy.
Scope
FortiGate.
Solution

While creating IPv4 policy based on user group or unit group, do not forget to add the address object or group. If only the user group or unit group in the source field is added, the IP address is missing. FortiGate will not be able to forward that traffic as it does not contain the source IP address.
To avoid that error, use the address object as 'All' or a specific address object in the source field.