ATP Geo-IP Filtering in Nebula

Options
pcservice
pcservice Posts: 4 image  Freshman Member
Fifth Anniversary
in Nebula
We usually block all continents except North America, I do not see Continents as a option in nebula just a long list of countries, it looks like you can only add 10 countries at a time. 
What is the best way to go about Geo-ip blocking with Nebula?   

All Replies

  • Zyxel_James
    Zyxel_James Posts: 809 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers
    Hello @pcservice,
    Welcome to Zyxel Community!

    I suggest to have a positive list instead of a negative list.
    For example, if you have a virtual server on the local network, and you would like to only accept the IP addresses from North America to access it. You will need two rules.
    One is allow source: USA, Canada..., and another is block source: any. Please note that allow rule should has higher priority then the block rule.

    - IP addresses from North America will match the first rule and be allowed to access.
    - IP addresses from another continents will match the second rule and be blocked to access.


    Regards,
    James

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）