Hello,
I am new to Fortinet set up, but we are engaging a partner that requires us to allow Inbound and Outbound connections from them. They have provided a list of 297 different IP address that need to be whitelisted. Is there an easy way to accomplish importing these and then allowing all communication?
A point in the right direction would be appreciated. Thanks.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi Xenitel,
I think you can create a script to import the IP addresses to your fortigate.
You can try this:
config firewall address
edit "X" <-- name
set subnet x.x.x.x x.x.x.x <- enter the ip address or subnet
next
edit "y"
set subnet y.y.y.y y.y.y.y
next
end
Once done, you can copy it and paste it in fortigate CLI, then you can select those IP addresses in your IPv4 policy to whitelist.
you still need some policy or similar too...the address objects alone don't do any whitelisting...
But once you have imported them all you could create an address group and use that in policies so you need less policies. If those are all on the same subnet segment you could also create an address object for that segment instead of every single ip...
--
"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1711 | |
1093 | |
752 | |
447 | |
231 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.