Fortinet black logo

Handbook

Using the Geo IP whitelist

Using the Geo IP allowlist

To configure a Geo IP allowlist:
  1. Go to Network Security > Geo IP Protection.
  2. Click the Whitelist tab to create a allowlist as described in Geo IP allowlist configuration.
  3. Click Save.

Geo IP allowlist configuration

Settings Guidelines

Name

Configuration name. The name can be up to 35 characters long. Valid characters are A-Z, a-z, 0-9, _, and -. No space is allowed.

After you initially save the configuration, you cannot edit the name.

Description

A string to describe the purpose of the configuration, to help you and other administrators more easily identify its use.

Status

Enable/disable the exception. You might have occasion to toggle the exception off and on.

Member

Type

Select and configure either of the following:

IP Subnet—Specify the IP address and CIDR-formatted subnet mask, separated by a forward slash ( / ), such as 192.0.2.0/24. Dotted quad formatted subnet masks are not accepted. IPv6 addresses are not supported.

IP Range—Specify the Start IP and the End IP addresses of the IP range.

Description

Enter a brief description of the IP subnet or IP range, depending on which Type you choose. The description can be up to 1023 characters long. Valid characters are A-Z, a-z, 0-9, _, -,., and :. No space is allowed.

Using the Geo IP allowlist

To configure a Geo IP allowlist:
  1. Go to Network Security > Geo IP Protection.
  2. Click the Whitelist tab to create a allowlist as described in Geo IP allowlist configuration.
  3. Click Save.

Geo IP allowlist configuration

Settings Guidelines

Name

Configuration name. The name can be up to 35 characters long. Valid characters are A-Z, a-z, 0-9, _, and -. No space is allowed.

After you initially save the configuration, you cannot edit the name.

Description

A string to describe the purpose of the configuration, to help you and other administrators more easily identify its use.

Status

Enable/disable the exception. You might have occasion to toggle the exception off and on.

Member

Type

Select and configure either of the following:

IP Subnet—Specify the IP address and CIDR-formatted subnet mask, separated by a forward slash ( / ), such as 192.0.2.0/24. Dotted quad formatted subnet masks are not accepted. IPv6 addresses are not supported.

IP Range—Specify the Start IP and the End IP addresses of the IP range.

Description

Enter a brief description of the IP subnet or IP range, depending on which Type you choose. The description can be up to 1023 characters long. Valid characters are A-Z, a-z, 0-9, _, -,., and :. No space is allowed.