This feature introduces the Exclude Members setting in IPv4 address groups. The specified IP addresses or ranges are subtracted from the address group.
This feature is only supported for IPv4 address groups, and only for addresses with a Type of IP Range or Subnet.
- Go to Policy & Objects > Addresses.
- Create a new address group, or edit an existing group.
- Enable Exclude Members, and select the addresses that will be excluded from the group.
- Click OK.
The excluded members are listed in the Exclude Member column.
config firewall addrgrp
edit <address group>
set exclude enable
set exclude-member <address> <address> ... <address>