Pros/cons in blocking GEO locations from inbound - other use of GEO fencing?

Options
tesagig
tesagig Posts: 56  Ally Member
First Anniversary 10 Comments Friend Collector
in Security
What is the advantage to further protect though incoming traffic from GEO locations?
Should I also block outbound?

All Replies

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 755  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    Hi @tesagig, 
    If you have a public service and can only connect from your or specify country ,you can use the function to limit. 
    It is not recommended to apply to outbound traffic otherwise there will be many sites unavailable
    All sceniaro have different settings ,  all depend on your needs. 
    We can provide the settings advice if you could me the sceniaro.
    Thank you
    Kevin


  • tesagig
    tesagig Posts: 56  Ally Member
    First Anniversary 10 Comments Friend Collector
    Options
    thanks. I don't have any service that need to connect to  USG, other than when I travel; e.g. for security video. Maybe VPN soon.

    So, my thinking was to lock down problem countries that I don't travel to. e.g. Most of Asia, Russia, ....

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 755  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options
    Hi @tesagig, 
    Please reffer the following settings to block traffic to Asia. 
    1) Create the GEO objects.

    2) Create the rule on top , src:internal dst:GEO_ASIA act:Deny.


    Then traffic from LAN to Asia will be blocked. 
    Thank you
    Kevin

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）