Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
acenyc
New Contributor

Help adding IP addresses to whitelist of Fortigate 200D and Fortigate 60D

I work at a small non profit in New York City. Our network administrator was in a bad accident. I have been asked to help out until a replacement can be found. I have no experience with firewall administration. I need to add IP addresses to the whitelist of  a Fortigate 200D and a Fortigate 60D. Where on the interface do I add these IP addresses. 

Thank you very much.

15 REPLIES 15
acenyc
New Contributor

Thank you Amanjot. I went through the all the steps in your post and I was able to find all the GUI interfaces you described. From here I'm just going to read the user guides and watch as many videos as I can to figure out how to use this firewall.

I have one question. I spoke with another network administrator I know that has some experience with this device, and he told me that to add IP addresses to the whitelist I need to go into:

1.security policies

2.Webfilter

Then add the url from that interface.

Which is the correct method? What are the differences between your way and his way?

I have included a screen shot of the webfilter interface that is already configured on my 200D.

Thank you.

 

rwpatterson
Valued Contributor III

If your goal is to pass traffic through the firewall on certain ports to/from certain entities then you need to create policies as described above. If you wish to filter by application, or A/V or otherwise then follow the other admin's advice. That though is done after the initial policy is created. It is an enhancement to the general policy allowing traffic to flow.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
acenyc
New Contributor

I have one more issue. I am having trouble finding the admin guide for the Fortigate 200D and the Fortigate 60D on the Fortinet document library. Are the admin guides listed by model number or version number?  I do have the quick start guide. Can someone give me the link to these manuals.

Thank You very much.

rwpatterson
Valued Contributor III

Aside from a few features that larger models have that smaller ones don't and port numbering/naming, the way to go is with the version guide.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
sylwok

Configuration Scripts

WEBGUI
system (config) - advanced - Configuration Scripts (script)

you prepare file.txt - my example
-------------------------------
config firewall address
edit black_ip_1115
set type ipmask
set subnet 191.96.249.136  255.255.255.255
next
edit black_ip_1116
set type ipmask
set subnet 196.52.43.57  255.255.255.255
next
edit black_ip_1117
set type ipmask
set subnet 206.72.196.175  255.255.255.255
next
end
config firewall addrgrp
edit black_ip_grp_1
set member black_ip_1115 black_ip_1116 black_ip_1117
end

--------------
remember, the group has a maximum of 300


SK
tewari_amit19

Hii All,   We have Fortigate 300d firewall, i had created one DMZ and mapped public ip to the local ip through policies.  I had opened the SSH port to these IP's, I want to whitelist particular IP address who only can make the ssh to that IP. Please tell the process. Thanks     Amit   

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors