FortiManager supports empty Address Group

FortiManager supports creation of an empty Address Group that can be use in policies.

To create a empty address group:

1. Go to Policy & Objects > Firewall Objects > Addresses.
2. Create a new address group.
   Address Groups without members can be created.
   
   
3. Create a policy which includes the empty Address Group.
   
4. Install the policy to a managed device.
   The empty address group is successfully installed.

   config firewall addrgrp

   edit "empty1"

   set uuid (UUID)

   next

   end

   config firewall policy

   edit 1

   set uuid (UUID)

   set srcaddr "empty1"

   set dstaddr "all"

   set schedule "always"

   set service "ALL"

   next

   end