Pros/cons in blocking GEO locations from inbound - other use of GEO fencing?

tesagig
tesagig Posts: 56
First Comment Friend Collector Third Anniversary
 Ally Member
in Security
What is the advantage to further protect though incoming traffic from GEO locations?
Should I also block outbound?

All Replies

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 558
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 50 Answers 500 Comments
     Zyxel Employee
    Hi @tesagig, 
    If you have a public service and can only connect from your or specify country ,you can use the function to limit. 
    It is not recommended to apply to outbound traffic otherwise there will be many sites unavailable
    All sceniaro have different settings ,  all depend on your needs. 
    We can provide the settings advice if you could me the sceniaro.
    Thank you
    Kevin


  • tesagig
    tesagig Posts: 56
    First Comment Friend Collector Third Anniversary
     Ally Member
    thanks. I don't have any service that need to connect to  USG, other than when I travel; e.g. for security video. Maybe VPN soon.

    So, my thinking was to lock down problem countries that I don't travel to. e.g. Most of Asia, Russia, ....

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 558
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 50 Answers 500 Comments
     Zyxel Employee
    Hi @tesagig, 
    Please reffer the following settings to block traffic to Asia. 
    1) Create the GEO objects.

    2) Create the rule on top , src:internal dst:GEO_ASIA act:Deny.


    Then traffic from LAN to Asia will be blocked. 
    Thank you
    Kevin

Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）