Technical Tip: Script to create Address objects and one address group for all geography countries on FortiGate

[salmas]

Description	This article describes how to use a script to import all geography-based address objects and to create an address object group for all the countries.
Scope	FortiGate.
Solution	Check the following steps to create an address object for each geography-based country and to create an address group for all the countries.  To create address objects, download the .zip file named Geography-based address objects.zip attached to this article.  Upload a script using the GUI: Select the username (Top right corner) and select Configuration -> Scripts. Select 'Run Script'. Select the text file from the downloaded zip and select 'OK'.   Confirm all country address objects are created by navigating to Policy & Objects -> Addresses: Geography. If desired, check and verify the IDs of each country on the text file attached.   diagnose firewall ipgeo country-list To create an address group for all the countries, another script is added to this document named All_countries_address_group_script.zip. Copy and paste this script to the FortiGate CLI. Note: The address object named 'Reserved' contains private IP subnets. Related document: Geography based addresses - FortiGate administration guide