Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
madunix
New Contributor

block ip

3 REPLIES 3
gschmitt
Valued Contributor

You mean all traffic?

Go to Policy & Objects > Objects > Addresses and click Create New

Name: badIP (or whatever)

Type IP/Netmask

Subnet / IP Range 63.247.65.42

Hit OK

 

OPTIONAL:

If you plan to repeat the process with other IPs click the down arrow next to Create New :downwards_button: and select Address Group

Name: badIPs (or whatever) and add the IPs to the members menu.

OK

 

Go to Policy & Objects > Policy > IPv4 and Create New

Incoming Interface: internal (or where your clients are located)

Source Address: all (unless you have an object for your internal network)

Outgoing Interface: wan (your internet facing interface)

Destiation Address: badIP(s)

Service: any

Action: Deny

OK

 

Test and done.

madunix

Is it safe to block this IP...

madunix

checked in virustotal

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors