Geography does not work

webdisaster · February 7

wantes to block access from outside austria for an external service.
adde d geo austria , made nat and securriy rule with source austria. Somerimes it work. Other times source is blocked and the block is logged

Log shows ,that the source comes from austria.
bit austria should be unblocked.

Removing geo give access to all and the service works

this problem exists at actual flex series (dont know if h series to) and on older usg. Thonk the problem exists since 4.38

Zyxel_Melen · February 10

Hi @webdisaster,

What's the log when the access is blocked? And what's your full security policy list?

webdisaster · February 10

Blocked with austrian flag at the end of the line. the strange thing is that sometimes it works

added group GEO. addad austria to group

made Firewall rule and NAT ( not representative - like i do every time on forwarding)

wan to lan1 sourc. GEO dest. 192.168.110.253 (Obj. XPC) service 1001 (XPC-Service) allow

Security Policy Control	Match default rule, DROP	x.x.x.x:53812	192.168.110.253:1001

PeterUK · February 10

If the other end uses a VPN then the rule will not apply

webdisaster · February 10

yes its a vpn. Flex is a VPN Endpoint. want to secure it to specific country

PeterUK · February 10

how does the other end and from where connect to this port 1001?

Geography does not work

All Replies

Categories

Security Help Center