Help adding IP addresses to whitelist of Fortigate 200D and Fortigate 60D

[acenyc]

I work at a small non profit in New York City. Our network administrator was in a bad accident. I have been asked to help out until a replacement can be found. I have no experience with firewall administration. I need to add IP addresses to the whitelist of  a Fortigate 200D and a Fortigate 60D. Where on the interface do I add these IP addresses. 

Thank you very much.

[acenyc]

Thank you Amanjot. I went through the all the steps in your post and I was able to find all the GUI interfaces you described. From here I'm just going to read the user guides and watch as many videos as I can to figure out how to use this firewall.

I have one question. I spoke with another network administrator I know that has some experience with this device, and he told me that to add IP addresses to the whitelist I need to go into:

1.security policies

2.Webfilter

Then add the url from that interface.

Which is the correct method? What are the differences between your way and his way?

I have included a screen shot of the webfilter interface that is already configured on my 200D.

Thank you.

[rwpatterson]

If your goal is to pass traffic through the firewall on certain ports to/from certain entities then you need to create policies as described above. If you wish to filter by application, or A/V or otherwise then follow the other admin's advice. That though is done after the initial policy is created. It is an enhancement to the general policy allowing traffic to flow.

[acenyc]

I have one more issue. I am having trouble finding the admin guide for the Fortigate 200D and the Fortigate 60D on the Fortinet document library. Are the admin guides listed by model number or version number?  I do have the quick start guide. Can someone give me the link to these manuals.

Thank You very much.

[rwpatterson]

Aside from a few features that larger models have that smaller ones don't and port numbering/naming, the way to go is with the version guide.

[sylwok]

Configuration Scripts

WEBGUI 
system (config) - advanced - Configuration Scripts (script)

you prepare file.txt    -  my example

-------------------------------
config firewall address
edit black_ip_1115
set type ipmask
set subnet 191.96.249.136  255.255.255.255
next 
edit black_ip_1116
set type ipmask
set subnet 196.52.43.57  255.255.255.255
next 
edit black_ip_1117
set type ipmask
set subnet 206.72.196.175  255.255.255.255
next 
end 
config firewall addrgrp
edit black_ip_grp_1
set member black_ip_1115 black_ip_1116 black_ip_1117
end 

--------------
remember, the group has a maximum of 300


SK

[tewari_amit19]

Hii All,   We have Fortigate 300d firewall, i had created one DMZ and mapped public ip to the local ip through policies.  I had opened the SSH port to these IP's, I want to whitelist particular IP address who only can make the ssh to that IP. Please tell the process. Thanks     Amit