Dear All.
I have doubt why we configure -
config firewall address
edit "test-reserved
set country zz
end
thank you.
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi Umesh
If you specify IN and ZZ as source address then both public IP addresses from India and local IP addresses will be allowed.
Hi Umesh
When you create this ZZ GeoIP address and use it in a firewall policy it means the address must be local (not public) in order to match, like 192.168.x.x, 172.16.x.x, 10.x.x.x and so.
Hi AEK,
let suppose I have to allow only India address. Can I mention in the policy.
Source address - Geo-India and reserved location - country zz.
Thanks
Hi Umesh
If you specify IN and ZZ as source address then both public IP addresses from India and local IP addresses will be allowed.
Hi @Umesh,
Below is an example of a geography address object for India.
config firewall address
edit "India"
set type geography
set country "IN"
next
end
Regards,
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1548 | |
1032 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.