GEO-IP Block only working after a restart

Veronesi

Hi everybody 

I have a VPN100 with latest Firmware.
I use the GEO-IP blocking mechanism a lot and it's working great.

Recently I added an additional country to my GEO-IP Blocking Group.
Then I waited for about 30 minutes, but this country was still not blocked.
After a restart of the firewall, this country was blocked immediately.

Is this a bug?
Does the firewall not recognize the change in the GEO-IP GROUP ?


The #2, #3 and #4 groups are groups with specific countries in it.
The 1st group is the main group and contains the groups #2, #3 and #4 and it's used in all rules.

Anyway, a restart helped, but for the future it might be useful that this rule could be applied without restarting the whole device.

Zyxel_Stanley

Hi @Veronesi
We had addressed this issue and will fix it in future.

Thanks for your feedback.

Zyxel_Vic

Hi @Veronesi
Had you ever connected to sites belong to the blocked country "BEFORE" applying the new group? If it is the case, please note that the new rules won't affect the "already existing sessions". It will block the new created sessions.

Veronesi

Hi @Zyxel_Vic

No I haven't. These connections were always blocked by the default rule. But I wanted to block them actively  that's the reason why I added them to my block list. 

Zyxel_Vic

Hi @Veronesi
I've seen similar symptom in my lab. We'll check why the behavior working in this way. 

Thanks for your feedback.

Veronesi

Thank you @Zyxel_Vic

Veronesi

Hi @Zyxel_Stanley
Thanks a lot!