Group with exclusion properties

[acheron538]

@all,

I'm going to migrate a customer of ours from checkpoint to a fortigate cluster. A 3th party converted the checkpoint firewall-objects to the fortigate standard.We are now building the policy on the new fortigate cluster.

In the checkpoint firewall, there's a "overlapping" group called an exclusion group. In this group, all other groups are present and within this group you can exlcude (negate) a sub-group, and there's our problem.

The conversion to the fortigate standard made this a standard group and we would like to make this one the same as on the checkpoint. Is it possible on a Fortigate to create such a group?

With kind regards,

Johnny