▲ 7 What does srccountry="Reserved" mean in a FortiGate log? asked by indyp 1 month ago Seeing it on nearly all my outbound traffic and it is not a country.
it means the address is private, there is no country to report. rfc1918
on outbound your source is internal so srccountry is basically always Reserved. dstcountry is the one you want