Technical Tip: Configuring FortiGate Firewall Policy to block traffic for one or more IP addresses

[#1]

Description	This article describes how to block an IP address.
Scope	FortiGate.
Solution	To block an IP address, create an address entry and create a firewall policy to block the address. Create an Address Object. Go to Policy & Objects -> Addresses. Select Create New. Enter a name for the address. Enter the IP address and subnet. Note that if blocking an internal IP address, set the netmask to 255.255.255.255, or /32. Otherwise, it could block the entire subnet. Create a Firewall Policy. Go to Policy & Objects -> Firewall Policy. Select Create new. Configure the firewall policy as required. For the Source and/or Destination address, select the address name added above. Set the Action to Deny. Move the firewall policy to the top of the policy list.