Technical Tip: Configuring FortiGate Firewall Policy to block traffic for one or more IP addresses

[#1]

Description	This article describes how to block an IP address.
Scope	All FortiGate units.
Solution	To block an IP address, create an address entry and create a firewall policy to block the address. Add an Address. To add an address entry: Go to Firewall -> Address. Select Create New. Enter a name for the address. Enter the IP address and subnet. Note that if blocking an internal IP address, set the netmask to 255.255.255.255, or /32. Otherwise, it could block the entire subnet. Add a Firewall Policy. To add a firewall policy: Go to Firewall -> Policy. Select Create new. Configure the firewall policy as required. For the Source and/or Destination address, select the address name added above. Set the Action to Deny. Move the firewall policy to the top of the policy list.