Address object and Service object in FortiGate Firewall

In Fortigate firewalls, address and service objects are used to simplify the configuration of firewall policies by grouping multiple IP addresses or services into a single object. This makes it easier to manage and update firewall policies when changes are made to the network.

An address object represents an IP address or subnet, and can be used to define the source or destination of a firewall policy. Address objects can be created for individual IP addresses, subnets, IP ranges, and geolocation data. Once an address object is created, it can be used in one or more firewall policies to simplify the configuration.

A service object represents a network service or protocol, and can be used to define the type of traffic to be filtered by a firewall policy. Service objects can be created for individual services, such as HTTP or SSH, or for groups of services, such as all TCP or all UDP services. Once a service object is created, it can be used in one or more firewall policies to simplify the configuration.

To create an address object in Fortigate firewall, the following steps can be followed:

To create a service object in Fortigate firewall, the following steps can be followed:

Overall, address and service objects are useful features in Fortigate firewalls that simplify the configuration of firewall policies and make it easier to manage and update network security policies.