I've mounted a script that does that, it passes an ip, and creates it as an object and puts it in a group:ġ.- the maximum limits for Fortigat in groups of addresses is 300.
Create a policy, a group of addresses and run, as is done with other manufacturers. My idea is to connect SIEM, Fail2ban, TOR exit nodes and other internal systems to Fortigate via SSH. I do not use Fortinet much, but I have a problem handling a simple Blacklist.