Technical Tip: IPv4 Address and Address Group not displayed in Source Field of Firewall Policy

Description

This article describes an issue where the Source field under firewall policy displays only IPv6 Address and IPv6 Address Group, while IPv4 Address and Address Group entries are missing.

Scope

FortiGate.

Solution

Attempting to add a new address in the firewall policy reveals that the Source field displays only IPv6 Address and IPv6 Address Group, while IPv4 address and address group entries are not available.

Under Policy & Objects -> Addresses, the 'Create New' option is missing, and only the 'View' option is available. The user account is configured with the super_admin profile, as verified in the System Administrator settings.

The current session is operating in 'Login Read-Only' mode, which prevents modification actions such as creating new address objects.

After logging in with 'Login Read-Write' access, the Address and Address Group entries became visible.

Note:

Since the FortiGate is managed by FortiManager, it is recommended to push the changes from FortiManager so that the config stays in sync with the FortiManager.