Chapter 7 Firewall for FortiOS 5.0 : Building firewall objects and policies : New Geography-based Address
  
New Geography-based Address
Your company is US based and has information on its web site that may be considered information that is not allowed to be sent to embargoed countries. In an effort to help reduce the possibility of sensitive information going to those countries you have be asked to set up addresses for those countries so that they can be block in the firewall policies.
One of the countries you have been asked to block is Cuba
You have been asked to Tag the addresses so that other administrators will know why they have been created
Go to Firewall Objects > Address > Addresses and select Create New > Address/FQDN.
Fill out the fields with the following information
Field Name
Field Value
Address Name
Cuba
Comments
<Input into this field is optional>
Color
<Changing this value is optional>
Type
Geography
Country
Cuba
Interface
any
Add Tags
Embargo
Select OK.
Enter the following CLI command:
config firewall address
edit Cuba
set type geography
set country CN
set interface wan1
end