FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
akileshc
Staff
Staff
Article Id 195441

Description
This article provides the configuration procedure to Exclude a members from the Address group.

Solution
Once the 'exclude' option is enabled over the specific address-group, it is possible to remove a Individual member from a specific address group.
In below mentioned example, 'IT-Users' is one of the member that belongs to the address group "Local_Users".

CLI Reference:

#config firewall addrgrp
    edit "Local_Users"
        set uuid 3bff87ac-e5e2-51e9-416a-42748064bc53
        set member "IT-Users" "Engineering"
        set comment ''
        set exclude enable
        set visibility enable
        set color 0
        set exclude-member "IT-Users" <- Member excluded from the user group
    next
End

GUI:

Commands to verify:
# sh full firewall addrgrp <*name>
*name    Address group name.

 

Contributors