IP blocking in fortigate 1200D on particular policy

Hello Umesh,

Blocking IPs in a policy one by one is probably not the best approach to... anything that has more than 20-30IPs.

You can use DDoS, GeoIP to block by country, external resources to store these IPs as a file on an external server, or use trusted hosts for admin users managing the unit.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-External-threat-list-threat-feed-blocked-via-the/ta-p/192354?externalID=FD48868

The public IPs that are showing attacks are too many to block like this, and changing too often to be worth the effort of setting up such policy, and also an effort to maintain it trough the GUI.

However, there is no limit to the number of objects in the policy, but there is a limit of the total address objects in the FortiGate (version dependant):

https://docs.fortinet.com/max-value-table
(select your unit and firmware version, and search for firewall.address)

Just keep it in mind that if you want to block access to your FGT, like VPNs, HTTPS, SSH, etc., you need to use local-in policy instead. Regular policies are for coming through traffic, from one interface to another interface.

Toshi