add more blocked countries

Options
MHIAdmin2026
MHIAdmin2026 Posts: 2 image  Freshman Member

I am only allowed to add 10 BLOCKED countries in country restrictions on USG LITE 60AX

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,687 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    edited April 9

    Hi @MHIAdmin2026 ,

    The USG LITE 60AX is designed as a streamlined security gateway for SOHO and small business environments, and as such, it does have specific hardware and software resource limits. Currently, the Country Restriction feature on this model is limited to 10 entries.

    To help you manage your security policies more effectively within these limits, you might consider the following:

    1. Switch to an "Allow List" Strategy: If you only need to allow traffic from a few specific regions and block everything else, selecting "Allow" for those countries will automatically deny all others. This is often more efficient than trying to block every individual country you don't trust.
    2. Prioritize High-Risk Regions: Focus your 10 "Block" entries on the specific countries from which you are observing the most frequent unauthorized access attempts.
    3. Security Policy Rules: For more granular control beyond 10 countries, you can use the standard Security Policy (Firewall) rules to block specific IP ranges or subnets, although these also have a limit of 15 rules on this specific model.

    I will pass your feedback regarding the country limit to our product development team for consideration in future firmware evaluations.

    To ensure I have the full context, could you please clarify:

    1. Is your primary goal to block inbound traffic to your local network, or are you trying to restrict outbound access for local users?
    2. Approximately how many countries were you hoping to add to your block list?
    Zyxel Melen