FortiClient Manager : Configuring FortiClient agent settings : Configuring firewall addresses on a FortiClient agent
 
Configuring firewall addresses on a FortiClient agent
Add, edit, and delete firewall addresses as required. Firewall policies specify firewall addresses to match the source or destination IP addresses of packets that the FortiClient agent receives.
Create New
Select to create a firewall address for the managed FortiClient agent.
Override
The FortiClient agent’s configuration includes those inherited from the group to which the computer belongs.
Selecting override allows you to modify the inherited firewall address configuration on this FortiClient agent. Deselecting override means that you want to use the firewall address configuration inherited from the group to which the computer belongs.
Even with inherited firewall address configurations, you can still create new firewall addresses for a FortiClient agent.
See “Adding a FortiClient agent group” and “Configuring settings for client groups”.
Name
The name of the firewall address.
Type
Select one of Single Address, IP Range, Subnet, or FQDN.
Single Address
IP Range
Subnet
FQDN
This name and format of this field depends on the Type setting.
Examples:
• Single Address: 10.10.1.2
• IP Range: 10.10.1.[12-20] or 10.10.1.12-10.10.1.20
• Subnet: 10.10.10.0/255.255.0.0
• FQDN: mysite.example.com
Comments
Comments on the firewall address.
Action
Delete: Remove the selected firewall address.
Edit: Modify the firewall address.
Copy to group: If the FortiClient agent belongs to a client group, add this address to the group configuration.
To add a firewall address:
1. In the FortiClient Manager, select Client/Group > Client > Managed Client in the navigation pane.
2. In the All Managed Clients list, select the FortiClient agent you want from the Host Name column.
3. From the FortiClient menu, select Firewall > IP Address > IP Address.
4. Select Create New, enter the information as described above and then select OK.