Mixed Subnets/GeoIP groups?

mMontana
mMontana Posts: 1,298  Guru Member
First Anniversary 10 Comments Friend Collector First Answer
Can a GeoIP definition from objects be part of a group?

Best Answers

  • Mario
    Mario Posts: 104  Ally Member
    First Anniversary 10 Comments Friend Collector Zyxel Certified Network Engineer Level 1 - Security
    Answer ✓
    Yes, you can group multiple GEO Objects to a group, but you can't mix Host/Subnet and GEO in one group.
    You have also the option to add IP / Ranges / Subnet to a Country, if the Zyxel Database hasn't the corect information.
    Let me know if this works for you.

  • mMontana
    mMontana Posts: 1,298  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited June 2021 Answer ✓
    Not the straighest way to get the result, but it works. Thanks for your hint, @Mario
    However, for avoiding (personal) confusion I prefer to have two rules for allowing access. One for subnet group, one for Geography.
    I know that's sub-optimal, and too many rules (currently 32, few disabled) are not that few, but not even that much.

All Replies

  • Mario
    Mario Posts: 104  Ally Member
    First Anniversary 10 Comments Friend Collector Zyxel Certified Network Engineer Level 1 - Security
    Answer ✓
    Yes, you can group multiple GEO Objects to a group, but you can't mix Host/Subnet and GEO in one group.
    You have also the option to add IP / Ranges / Subnet to a Country, if the Zyxel Database hasn't the corect information.
    Let me know if this works for you.

  • mMontana
    mMontana Posts: 1,298  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited June 2021 Answer ✓
    Not the straighest way to get the result, but it works. Thanks for your hint, @Mario
    However, for avoiding (personal) confusion I prefer to have two rules for allowing access. One for subnet group, one for Geography.
    I know that's sub-optimal, and too many rules (currently 32, few disabled) are not that few, but not even that much.

Security Highlight