Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Yasaman
New Contributor

Block IP Addresses

Hi,

I am hardy consider to know that how would be possible to block some IPs in a network? shall I block the IPs using firewall, if I'm right how should I use with API? I'm new with this topic, but I will appreciate your answer to inform me.

Thanks

1 Solution
tioeudes

You can get dynamic ip lists by using these APIs, if they're available for you

 

https://docs.fortinet.com/document/fortigate/6.2.2/new-features/98756/fabric-connectors.

 

I don't know any other way to do that...

 

 

regards,

tioeudes

View solution in original post

4 REPLIES 4
harmesh88
New Contributor

Dear ,

 

You have to create one Network Group and Add all IP on it and block by creating firewall policy .

 

 

If you need to block Geo location also you can add multiple Geo location in Policy and block it . 

Yasaman

thanks @harmesh88 for your reply. but the problem is, how would be possible to block IPs dynamically? because IPs would show up by a external software and I have to give this IP list to firewall via firewall's API. but I don't know how it works.!!!

tioeudes

You can get dynamic ip lists by using these APIs, if they're available for you

 

https://docs.fortinet.com/document/fortigate/6.2.2/new-features/98756/fabric-connectors.

 

I don't know any other way to do that...

 

 

regards,

tioeudes

paul047

Hi Harmesh88, 
How can I create a group , can you give some steps ? I use FortiManager to manage multiple Firwalls.

Top Kudoed Authors