Creating a virtual IP Go to Policy & Objects > Virtual IPs. Select Create New. A drop down menu is displayed. Select Virtual IP. From the VIP Type options, choose an applicable type based on the IP addressing involved. Which is chosen will depend on which of the IP version networks is on the external […]

Virtual IPs The mapping of a specific IP address to another specific IP address is usually referred to as Destination NAT. When the Central NAT Table is not being used, FortiOS calls this a Virtual IP Address, sometimes referred to as a VIP. FortiOS uses a DNAT or Virtual IP address to map an External […]

Creating an address group Go to Policy & Objects > Addresses. Select the down arrow next to Create New, select Address Group. Choose the Category, that is applicable to the proposed selection of addresses. Input a Group Name for the address object. Depending on which Category has been chosen the configurations will differ slightly IPv4 […]

Address groups Address groups are designed for ease of use in the administration of the device. If you have a number of addresses or address ranges that will commonly be treated the same or require the same security policies, you can put them into address groups, rather than entering multiple individual addresses in each policy […]

Internet services In FortiOS 5.4, support was added for Internet Service objects which could be used with FortiView, Logging, Routing and WAN Load Balancing. Now they can be added to firewall policies as well. There is an either or relationship between Internet Service objects and destination address and service combinations in firewall policies. This means […]

Proxy addresses This category of address is different from the other addresses in that it is not designed to be used in the normal firewall policy configuration. It is intended to be used only with explicit web proxies. In some respects they can be like a FQDN addresses in that they refer to an alpha-numeric […]

Multicast addresses Multicast addressing defines a specific range of address values set aside for them. Therefore all IPv4 multicast addresses should be between 224.0.0.0 and 239.255.255.255. More information on the concepts behind Multicast addressing can be found in the Multicast Forwarding section. Multicast IP range This type of address will allow multicast broadcasts to a […]