Chapter 7 Firewall for FortiOS 5.0 : Building firewall objects and policies : Wildcard Address
  
Wildcard Address
The company has a large network with multiple subnets. Each team has its own subnet in the 172.12.x.x range. To help keep things organized the IT department uses the same host address on each subnet for the servers. For instance the gateways are always.1 or .2. mail servers are always .5 and print servers are always .10.
In this case an address needs to be created for the mail servers for the entire company.
The addresses will be 172.12.0.5, 172.12.1.5, 172.12.2.5, etc.
Go to Firewall Objects > Address > Addresses and select Create New > Address/FQDN.
Fill out the fields with the following information
Address Name
Print_Servers
Comments
<Input into this field is optional>
Color
<Changing this value is optional>
Type
Subnet / IP Range
Subnet / IP Range
172.12.0.5 / 255.255.0.255
Interface
any
Select OK.
 
There will be a pop up window explaining that the address will automatically be converted to a wildcard address and ask if you would like to continue. When you see the address in the editing window you will notice that the type field shows wildcard even though that was not an option before.
Enter the following CLI command:
config firewall address
edit Print_Servers
Set type wildcard
Set wildcard 172.12.0.5 255.255.0.255
end
To verify that the addresses were added correctly:
Go to Firewall Objects > Address > Addresses. Check that the addresses have been added to the address list and that they are correct.
Enter the following CLI command:
config firewall address
edit <the name of the address that you wish to verify>
Show full-configuration