Mixed Subnets/GeoIP groups?

mMontana
mMontana Posts: 1,426  Guru Member
Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
in Security
Can a GeoIP definition from objects be part of a group?

Best Answers

  • Mario
    Mario Posts: 109  Ally Member
    Zyxel Certified Network Engineer Level 1 - Security First Comment Friend Collector Sixth Anniversary
    Answer ✓
    Yes, you can group multiple GEO Objects to a group, but you can't mix Host/Subnet and GEO in one group.
    You have also the option to add IP / Ranges / Subnet to a Country, if the Zyxel Database hasn't the corect information.
    Let me know if this works for you.

  • mMontana
    mMontana Posts: 1,426  Guru Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
    edited June 2021 Answer ✓
    Not the straighest way to get the result, but it works. Thanks for your hint, @Mario
    However, for avoiding (personal) confusion I prefer to have two rules for allowing access. One for subnet group, one for Geography.
    I know that's sub-optimal, and too many rules (currently 32, few disabled) are not that few, but not even that much.

All Replies

  • Mario
    Mario Posts: 109  Ally Member
    Zyxel Certified Network Engineer Level 1 - Security First Comment Friend Collector Sixth Anniversary
    Answer ✓
    Yes, you can group multiple GEO Objects to a group, but you can't mix Host/Subnet and GEO in one group.
    You have also the option to add IP / Ranges / Subnet to a Country, if the Zyxel Database hasn't the corect information.
    Let me know if this works for you.

  • mMontana
    mMontana Posts: 1,426  Guru Member
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
    edited June 2021 Answer ✓
    Not the straighest way to get the result, but it works. Thanks for your hint, @Mario
    However, for avoiding (personal) confusion I prefer to have two rules for allowing access. One for subnet group, one for Geography.
    I know that's sub-optimal, and too many rules (currently 32, few disabled) are not that few, but not even that much.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）