Pros/cons in blocking GEO locations from inbound - other use of GEO fencing?
Options
All Replies
-
Hi @tesagig,
If you have a public service and can only connect from your or specify country ,you can use the function to limit.
It is not recommended to apply to outbound traffic otherwise there will be many sites unavailable
All sceniaro have different settings , all depend on your needs.
We can provide the settings advice if you could me the sceniaro.
Thank you
Kevin
Share yours now!
Kevin
0 -
thanks. I don't have any service that need to connect to USG, other than when I travel; e.g. for security video. Maybe VPN soon.So, my thinking was to lock down problem countries that I don't travel to. e.g. Most of Asia, Russia, ....0
-
Hi @tesagig,
Please reffer the following settings to block traffic to Asia.
1) Create the GEO objects.
2) Create the rule on top , src:internal dst:GEO_ASIA act:Deny.
Then traffic from LAN to Asia will be blocked.
Thank you
KevinShare yours now!
Kevin
0
Categories
- All Categories
- 413 Beta Program
- 2.3K Nebula
- 192 Nebula Ideas
- 87 Nebula Status and Incidents
- 5.3K Security
- 142 USG FLEX H Series
- 253 Security Ideas
- 1.3K Switch
- 75 Switch Ideas
- 993 Wireless
- 51 Wireless Ideas
- 6.1K Consumer Product
- 231 Service & License
- 362 News and Release
- 74 Security Advisories
- 23 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2.6K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 101 About Community
- 67 Security Highlight