Fortinet black logo

Administration Guide

Creating ZTNA tag groups

Creating ZTNA tag groups

Note

You must enable the visibility of this feature in Policy & Objects before it can be configured. To toggle feature visibility, go to Policy & Objects > Tools > Feature Visibility, and add or remove a checkmark for the corresponding feature.

Once a ZTNA tag group has been configured, you can select the object in a proxy policy with the ZTNA proxy type. See Create a new proxy policy.
To create a ZTNA Tag Group:
  1. Go to Object Configurations > Firewall Objects > ZTNA Tag, and click Create New.
    The Create New ZTNA Tag Group window opens.
  2. Enter a name for the group.
  3. Select a ZTNA Tag type from one of the following:
    • EMS
    • Geographic IP
  4. Select Members to add to the ZTNA tag group.
    • When configuring an EMS tag group, members are configured in Policy & Objects > Object Configurations > Firewall Objects > ZTNA Tag with a IP or MAC object type. See Viewing ZTNA tags.
    • When configuring a Geographic IP tag group, members are configured in Policy & Objects > Object Configurations > Firewall Objects > Addresses as a Firewall Address with the Type set as Geography. See Creating ZTNA geographic IP objects.
  5. Click OK to save the group.

Creating ZTNA tag groups

Note

You must enable the visibility of this feature in Policy & Objects before it can be configured. To toggle feature visibility, go to Policy & Objects > Tools > Feature Visibility, and add or remove a checkmark for the corresponding feature.

Once a ZTNA tag group has been configured, you can select the object in a proxy policy with the ZTNA proxy type. See Create a new proxy policy.
To create a ZTNA Tag Group:
  1. Go to Object Configurations > Firewall Objects > ZTNA Tag, and click Create New.
    The Create New ZTNA Tag Group window opens.
  2. Enter a name for the group.
  3. Select a ZTNA Tag type from one of the following:
    • EMS
    • Geographic IP
  4. Select Members to add to the ZTNA tag group.
    • When configuring an EMS tag group, members are configured in Policy & Objects > Object Configurations > Firewall Objects > ZTNA Tag with a IP or MAC object type. See Viewing ZTNA tags.
    • When configuring a Geographic IP tag group, members are configured in Policy & Objects > Object Configurations > Firewall Objects > Addresses as a Firewall Address with the Type set as Geography. See Creating ZTNA geographic IP objects.
  5. Click OK to save the group.