static route

[Israt24Fortinet]

Hello! In a normal connection (like internet - router - firewall - LAN device) the destination is the default route 0.0.0.0/0.0.0.0.

1) what does it mean by named address?

2) In which case we do not use the default route? 

3) for what purpose we select internet service option?

4) for IPSec VPN, is it mandatory to use blackhole as the interface?

[ozkanaltas · Accepted solution]

Hello @Israt24Fortinet ,

1- You can use an address object instead of the IP address on the route configuration.

2- If you know all unknown destination addresses on the internet. You don't need to use default route.

You can find, more information about the routing concept.

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/139692/routing-concepts

3- You can find more information about internet service in this link. 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/849970/internet-services

4-No need to configure the blackhole interface.