Country GeoIP source based policy

[neok]

Hi, I have been using FortiGate for a week. So I am a bit new. I have a question: I want to know if I can restrict access to my FTP server so that the port forwarding policy only allows connections from IPs from a certain country/countries.

I can't find how to do it, if it is possible to do it.

Thank you very much in advance.

Best regards, Gabriel

[emnoc]

easy as 1-2-3

config firewall address edit "USA" set type geography set country "US" next end

config firewall policy edit 0  set srcintf "wan1" set dstintf "lan" set srcaddr "USA" set action accept set schedule "always" set service "FTP" next end