[ATP/FLEX]How can I allow Geo-IP to access the internal client via NAT?

Zyxel_Jeff

Scenario :

If the user wants to allow Geo-IP to access the internal client via NAT, how should it be configured?

Answer :

First, please navigate to Site-Wide > Configure > Firewall > NAT to add a NAT rule.

Second, please navigate to Site-wide > Configure > Firewall > Security policy to add a security policy to allow the Geo IP to access the LAN IP. If there is another Geo IP that is not allowed to access the LAN IP, it will be dropped by the Implicit Deny rule.