Fortinet black logo

Administration Guide

Home FortiManager 7.4.2 Administration Guide
7.4.2
7.4.2
7.4.1
7.4.0
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.6
6.2.5
6.2.3
6.2.2
6.2.1
6.2.0
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.6.11
5.6.10
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.6.4
5.6.3
5.6.2
5.6.1
5.6.0
5.4.7
5.4.6
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4.0
5.2.10
5.2.7
5.2.6
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
4.3.8
4.3.7
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.9
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0

Creating security posture tag groups

Creating security posture tag groups

Note

You must enable the visibility of this feature in Policy & Objects before it can be configured. To toggle feature visibility, go to Policy & Objects > Tools > Feature Visibility, and add or remove a checkmark for the corresponding feature.
Once a security posture tag group has been configured, you can select the object in a proxy policy with the ZTNA proxy type. See Create a new proxy policy.
To create a security posture tag group:
  1. Go to Policy & Objects > Firewall Objects > Security Posture Tag, and click Create New.
    The Create New Security Posture Tag Group window opens.
  2. Enter a name for the group.
  3. Select a Security Posture Tag type from one of the following:
    • EMS
    • Geographic IP
  4. Select Members to add to the security posture tag group.
    • When configuring an EMS tag group, members are configured in Policy & Objects > Firewall Objects > Security PostureTag with an IP or MAC object type. See Viewing security posture tags.
    • When configuring a Geographic IP tag group, members are configured in Policy & Objects > Firewall Objects > Addresses as a Firewall Address with the Type set as Geography. See Creating ZTNA geographic IP objects.
  5. Click OK to save the group.
Previous
Next

Creating security posture tag groups

Note

You must enable the visibility of this feature in Policy & Objects before it can be configured. To toggle feature visibility, go to Policy & Objects > Tools > Feature Visibility, and add or remove a checkmark for the corresponding feature.
Once a security posture tag group has been configured, you can select the object in a proxy policy with the ZTNA proxy type. See Create a new proxy policy.
To create a security posture tag group:
  1. Go to Policy & Objects > Firewall Objects > Security Posture Tag, and click Create New.
    The Create New Security Posture Tag Group window opens.
  2. Enter a name for the group.
  3. Select a Security Posture Tag type from one of the following:
    • EMS
    • Geographic IP
  4. Select Members to add to the security posture tag group.
    • When configuring an EMS tag group, members are configured in Policy & Objects > Firewall Objects > Security PostureTag with an IP or MAC object type. See Viewing security posture tags.
    • When configuring a Geographic IP tag group, members are configured in Policy & Objects > Firewall Objects > Addresses as a Firewall Address with the Type set as Geography. See Creating ZTNA geographic IP objects.
  5. Click OK to save the group.
Previous
Next