BugZero | Fortinet BugID 1217157 - GeoIP allow/block functionality fails when configu...

Fortinet - Defect ID: 1217157

GeoIP allow/block functionality fails when configuring VIP with GeoIP as source due to a limitation in number of unique countries (256) that can be added to kernel from a firewall policy

Fortinet - Defect ID: 1217157

GeoIP allow/block functionality fails when configuring VIP with GeoIP as source due to a limitation in number of unique countries (256) that can be added to kernel from a firewall policy

Last updated on April 21st, 2026

BugZero Risk Score
8.0 High

Overall: 8.0

Lifecycle: 10.0

Community: 3.7

What is the BugZero Risk Score?

Fortinet Integration

Learn more about where this data comes from

Fortinet Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Priority: Unspecified
Status: Fixed
Impacted Service: Firewall

Description

GeoIP allow/block functionality fails when configuring VIP with GeoIP as source due to a limitation in number of unique countries (256) that can be added to kernel from a firewall policy.

Change history

2026-04-21 Added: 8.0.0

Top Fortinet Defects

8.0Defect ID: 1217157
GeoIP allow/block functionality fails when configuring VIP with GeoIP as source due to a limitation in number of unique countries (256) that can be added to kernel from a firewall policy
8.0Defect ID: 1224865
Passive port translation occurs when FTP helper is enabled despite VIP port forwarding being disabled
8.0Defect ID: 1233342
Traffic drop occurs when ipv4-proto-err is enabled on NP7-based FortiGate
8.0Defect ID: 1235349
Destination IP addresses become unreachable when auto-asic-offload is enabled on the policy where emac-vlan interfaces are used and VRRP virtual mac is enabled
8.0Defect ID: 1238779
Real server URL health check fails when using http-get with http:// scheme after upgrading to 7.4.9

Ready to prevent the next vendor outage?

Get a demo

Fortinet - Defect ID: 1217157

GeoIP allow/block functionality fails when configuring VIP with GeoIP as source due to a limitation in number of unique countries (256) that can be added to kernel from a firewall policy

Fortinet - Defect ID: 1217157

GeoIP allow/block functionality fails when configuring VIP with GeoIP as source due to a limitation in number of unique countries (256) that can be added to kernel from a firewall policy

Last updated on April 21st, 2026

BugZero Risk Score8.0 High

Bug Details

Links

Top Fortinet Defects

Ready to prevent the next vendor outage?

BugZero Risk Score
8.0 High