Troubleshooting Tip: Unable to install policy package when adding new address to address group

Description

This article describes how to fix an issue where FortiManager is unable to install the policy package when adding a new address to an address group.

Scope

FortiManager.

Solution

In the following are the addresses, address group, and policy assigned to the FortiGate:

The objective is to add a new Network_D address inside the existing Address Group:

However, the install wizard shows 'no change made on package':

After further investigation, there is a per-device mapping assigned to the device:

To fix this issue, assign 'Network_D' inside the per-device mapping setting as shown below:

Now, the Install Preview shows the new addition of 'Network_D' inside the 'Network_Addr_Group':