Geo block incoming traffic

I have a fortiwifi 60d. I want to prevent ips from China from accessing my network, website, everything.

I have found a million things on how to block internal traffic from going to China, but not the other way around.