[ATP/FLEX] How to block IP traffic by Geo IP on Nebula

Zyxel_James
Posts: 664
Zyxel Employee





Nebula Control Center supports Geo IP that allows you to block internet traffic coming in from a specific region or country that is usually very suspicious/well-known to be the origin of malicious attacks. On the contrary, you can also only allow internet traffic coming in from your country.
Configure Steps
Go to Configure > Firewall > Security policy, create a new rule
- Input a name for the security rule
- Select Deny as Action
- Select the suspicious/malicious country as Source
- Select Any as Destination.

After the Geo IP security rule is configured, requests from that country to your device or your internal networks will be blocked. You can enable the log button to monitor the denied actions.
To look up the Geo IP database version, please connect to ssh and input “show geo-ip database version"

To look up the country of the IP address, please connect to ssh and input “show geo-ip geography address x.x.x.x”
Tagged:
0
Categories
- All Categories
- 415 Beta Program
- 2.5K Nebula
- 154 Nebula Ideas
- 103 Nebula Status and Incidents
- 5.9K Security
- 307 USG FLEX H Series
- 284 Security Ideas
- 1.5K Switch
- 78 Switch Ideas
- 1.1K Wireless
- 42 Wireless Ideas
- 6.5K Consumer Product
- 256 Service & License
- 397 News and Release
- 85 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.7K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 87 About Community
- 77 Security Highlight