Fortinet Document Library

Version:

Version:


Table of Contents

Related Videos

Address Groups with Exclusions

  • 465 views
  • 8 months ago

Cookbook

Download PDF
Copy Link

Address group exclusions

Specific IP addresses or ranges can be subtracted from the address group with the Exclude Members setting in IPv4 address groups.

Note

This feature is only supported for IPv4 address groups, and only for addresses with a Type of IP Range or Subnet.

To exclude addresses from an address group using the GUI:
  1. Go to Policy & Objects > Addresses.
  2. Create a new address group, or edit an existing address group.

  3. Enable Exclude Members. The Select Entries pane opens.
  4. Select the addresses you want to exclude from the group.
  5. Click OK.

    The excluded members are listed in the Exclude Members column.

To exclude addresses from an address group using the CLI:

config firewall addrgrp

edit <address group>

set exclude enable

set exclude-member <address> <address> ... <address>

next

end

Related Videos

Address Groups with Exclusions

  • 465 views
  • 8 months ago

Address group exclusions

Specific IP addresses or ranges can be subtracted from the address group with the Exclude Members setting in IPv4 address groups.

Note

This feature is only supported for IPv4 address groups, and only for addresses with a Type of IP Range or Subnet.

To exclude addresses from an address group using the GUI:
  1. Go to Policy & Objects > Addresses.
  2. Create a new address group, or edit an existing address group.

  3. Enable Exclude Members. The Select Entries pane opens.
  4. Select the addresses you want to exclude from the group.
  5. Click OK.

    The excluded members are listed in the Exclude Members column.

To exclude addresses from an address group using the CLI:

config firewall addrgrp

edit <address group>

set exclude enable

set exclude-member <address> <address> ... <address>

next

end