GEO-IP Block only working after a restart

Veronesi · April 2019

Hi everybody

I have a VPN100 with latest Firmware.
I use the GEO-IP blocking mechanism a lot and it's working great.

Recently I added an additional country to my GEO-IP Blocking Group.
Then I waited for about 30 minutes, but this country was still not blocked.
After a restart of the firewall, this country was blocked immediately.

Is this a bug?
Does the firewall not recognize the change in the GEO-IP GROUP ?

The #2, #3 and #4 groups are groups with specific countries in it.
The 1st group is the main group and contains the groups #2, #3 and #4 and it's used in all rules.

Anyway, a restart helped, but for the future it might be useful that this rule could be applied without restarting the whole device.

Zyxel_Stanley · April 2019

Hi @Veronesi
We had addressed this issue and will fix it in future.

Thanks for your feedback.

Zyxel_Vic · April 2019

Hi @Veronesi
Had you ever connected to sites belong to the blocked country "BEFORE" applying the new group? If it is the case, please note that the new rules won't affect the "already existing sessions". It will block the new created sessions.

Veronesi · April 2019

Hi @Zyxel_Vic

No I haven't. These connections were always blocked by the default rule. But I wanted to block them actively that's the reason why I added them to my block list.

Zyxel_Vic · April 2019

Hi @Veronesi
I've seen similar symptom in my lab. We'll check why the behavior working in this way.

Thanks for your feedback.

Veronesi · April 2019

Thank you @Zyxel_Vic

Zyxel_Stanley · April 2019

Hi @Veronesi
We had addressed this issue and will fix it in future.

Thanks for your feedback.

Veronesi · April 2019

Hi @Zyxel_Stanley
Thanks a lot!

GEO-IP Block only working after a restart

Accepted Solution

All Replies

Categories

Security Help Center