[ATP/FLEX] How to block GeoIP to establish IPsec VPN connection with your firewall?

Options
Zyxel_Jeff
Zyxel_Jeff Posts: 1,066  Zyxel Employee
First Anniversary 10 Comments Friend Collector First Answer

Scenario :

If you want to block specific GeoIP addresses from establishing an IPsec VPN connection with your firewall to enhance the security of your network services, how can you configure this?

Answer :

Please navigate to Site-wide> Configure > Firewall > Security policy and add a security policy to deny UDP 500, and UDP 4500 from the specified GeoIP as shown below: