Troubleshooting Tip: Private IP is getting blocked by GEO-IP

GEO-IP is a security feature that allows access based on the client's Location/Country. However, in some cases, the client might be using a private IP and still gets blocked by GEO-IP:

This issue can be resolved by removing the category 'unknown country/region' from the Selected Geolocation List.

CLI commands:

config waf geo-block-list
    edit "Test"
        set block-period 600
        set severity High
            config country-list
                edit 1
                    set country-name China
                next
                edit 2
                    set country-name "Russian Federation"
                next
                edit 3
                    set country-name "Unknown Country/Region"
                next
            end
    next
end

To remove entry number 3:

config waf geo-block-list

    edit "Test"

        config country-list

        delete 3

        end

end

Related document:
GEO IP - Blocklisting & whitelisting countries & regions