FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kjay
Staff
Staff
Article Id 411149
Description This article describes an issue where the Address object table on FortiGate devices cannot be filtered using CIDR notation (for example, /24) after upgrading to FortiOS v7.4.x.
Scope

FortiGate v7.4.

Solution

The address object table supports only simple string-based filters and lacks IP logic-based filters like contains or overlaps, causing searches with CIDR notation (for example, 1.1.1.0/24) to return inaccurate results.

 

Test Environment.

Tested on these versions:

  • v7.2.8.

  • v7.4.8.

  • v7.6.4.

 

Reproduction Steps.

  1. Go to Policy & Objects -> Addresses.

  2. Create these address objects (IP Range/Subnet):

    • 1.1.1.0/24.

    • 1.1.1.1/32.

    • 1.1.1.2/32.
    • 1.1.1.3/32.
  3. In the search bar, type 1.1.1.0/24.

 

Results.

  • v7.2.8: Shows matching results.
                                                   

728.jpg

 

  • v7.4.8: non-exact matches (issue occurs).
                                                           
    748.jpg

 

  • v7.6.4: Shows matching results.
                                                                           
    764.jpg

 

Resolution.

  • This issue only occurs in FortiOS v7.4.x.

  • It is fixed starting from FortiOS v7.6.4 build 3580.