Address object and Service object in FortiGate Firewall

In Fortigate firewalls, address and service objects are used to simplify the configuration of firewall policies by grouping multiple IP addresses or services into a single object. This makes it easier to manage and update firewall policies when changes are made to the network.

An address object represents an IP address or subnet, and can be used to define the source or destination of a firewall policy. Address objects can be created for individual IP addresses, subnets, IP ranges, and geolocation data. Once an address object is created, it can be used in one or more firewall policies to simplify the configuration.

A service object represents a network service or protocol, and can be used to define the type of traffic to be filtered by a firewall policy. Service objects can be created for individual services, such as HTTP or SSH, or for groups of services, such as all TCP or all UDP services. Once a service object is created, it can be used in one or more firewall policies to simplify the configuration.

To create an address object in Fortigate firewall, the following steps can be followed:

1. Access the Fortigate firewall's web interface and go to the Policy & Objects section.

2. Click on the Address option to view the list of configured address objects.

3. Click on the Add button to create a new address object.

4. In the Add Address Object window, enter the name, type, and IP address or subnet for the address object.

5. Click on OK to save the address object configuration.

To create a service object in Fortigate firewall, the following steps can be followed:

1. Access the Fortigate firewall's web interface and go to the Policy & Objects section.

2. Click on the Service option to view the list of configured service objects.

3. Click on the Add button to create a new service object.

4. In the Add Service Object window, enter the name, protocol, and port number or range for the service object.

5. Click on OK to save the service object configuration.

Overall, address and service objects are useful features in Fortigate firewalls that simplify the configuration of firewall policies and make it easier to manage and update network security policies.