Technical Tip: Allow creation of ISDB objects with regional information
Description
The article describes how to configure ISDB objects with regional information in the policy.
Solution
The article describes how to configure ISDB objects with regional information in the policy.
Solution
From GUI.
Go to Policy & Objects -> Internet Service Database, select 'Create New' and select 'Geographic Based'.
Go to Policy & Objects > Firewall Policy, create a new policy, for destination, select 'Internet Service' and select the ISDB object created.
From CLI.
Create Internet-service-name from CLI.
# config firewall internet-service-nameCreate policy with Internet-service-name object.
edit "ISDB_Regionbased
set type location
set internet-service-id 393320
set country-id 356
set region-id 860
set city-id 2139
next
end
# config firewall policy
edit 1
set name "Allow_Amazon_AWS"
set uuid 6085871a-9457-51ea-c345-d2467146f17e
set srcintf "port2"
set dstintf "port1"
set srcaddr "all"
set internet-service enable
set internet-service-name "ISDB_Regionbased"
set action accept
set schedule "always"
set nat enable
next
end
