profile geoip-group

Use this command to create groups of IP addresses organized by geographic locations such as country names, using the GeoIP database from FortiGuard.

The database combines public IP address range, owner, service port numbers, and security credibility. Information is regularly added to this database, such as updates to geographic location, IP reputation, popularity, DNS entries, and more. All this information can help to keep your Internet security configuration up-to-date as cloud and other services move and expand.

Syntax

config profile geoip-group

edit name <group_name>

[set description "<description_str>"]

set country {ZZ O1 AD ...}

end

Variable	Description	Default
name <group_name>	Enter a unique name.
description "<description_str>"	Enter a description.
country {ZZ O1 AD ...}	Enter a country code. Separate multiple countries with a space. To display a list of currently known country codes, enter: set country ?

Related topics

system geoip-override

policy access-control delivery

policy access-control receive

policy ip