FortiGate Administration Guide - FirewallShop.com

Firewall Address
About firewall addresses
Firewall Address
Add, edit, and delete firewall addresses as required. Firewall addresses are
added to the source and destination address fields of firewall policies. Firewall
addresses are added to firewall policies to match the source or destination IP
addresses of packets that are received by the FortiGate unit.
This section describes:
• About firewall addresses
• Viewing the firewall address list
• Configuring addresses
• Viewing the address group list
• Configuring address groups
About firewall addresses
A firewall address can be:
• The IP address of a single computer (for example, 192.45.46.45).
• The IP address of a subnetwork (for example, 192.168.1.0 for a class C
subnet).
• 0.0.0.0 to represent all possible IP addresses
The netmask corresponds to the type of address being added. For example:
• The netmask for the IP address of a single computer should be
255.255.255.255.
• The netmask for a class A subnet should be 255.0.0.0.
• The netmask for a class B subnet should be 255.255.0.0.
• The netmask for a class C subnet should be 255.255.255.0.
• The netmask for all addresses should be 0.0.0.0
An IP Range address represents:
• A range of IP addresses in a subnet (for example, 192.168.20.1 to
192.168.20.10)
Note: IP address: 0.0.0.0 and Netmask: 255.255.255.255 is not a valid firewall address.
Organize related addresses into address groups to simplify policy creation.
A firewall address can be configured with a name, an IP address, and a netmask,
or a name and IP address range. It can also be a fully qualified domain name
(FQDN).
Enter an IP address and netmask using the following formats:
• x.x.x.x/x.x.x.x, for example 192.168.1.0/255.255.255.0
• x.x.x.x/x, for example 192.168.1.0/24
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 289