FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kjiye
Staff & Editor
Staff & Editor
Article Id 394828
Description This article explains that 'all' objects are not mutually exclusive when executing the CLI's 'append' command.
Scope FortiGate.
Solution
  1. CLIIf the members are added to the address group using CLI's 'append' command, members are not mutually excluded even if 'all' is included.

 

addrgrp_cli.png

 

  1. GUI: When set via GUI, when adding another object while there is an 'all' object, the 'all' object will be excluded.
  • The 'all' object was added to the address group in the GUI:

 

스크린샷 2025-06-04 143813.png

 

  • When the 10.0.1.0/24 object was added, the 'all' object was automatically removed:

 

스크린샷 2025-06-04 144015.png

 

Workaround:

This will be fixed in v7.6.4 and v8.0.0. Until then, use the GUI for making or editing the address group.