Skip to main content
jdsauer77
New Member
April 22, 2025
Question

Best way to Geo-Block / Can FNT not create a list for Fortigates?

  • April 22, 2025
  • 1 reply
  • 445 views

I've been looking at how to best do geo-blocking, and my options are to set every rule I have for inbound access to only accept from specific locations, or to manually add all the ones I don't want to a rule that applies at the top of the list. With SonicWALL, WatchGuard, etc. I can select the countries I don't want and set that policy at the top, why doesn't my Fortigate have the same option?

 

As for the meat of the question, does anyone have a curated list of countries that they use and is available without a $25/month or more subscription?

1 reply

AEK
SuperUser
SuperUser
April 22, 2025

On FGT you can also select the countries you don't want and set that policy at the top.

Create new policy at the top like this:

  • Source intf: WAN
  • Dest intf: DMZ interface
  • Source: GeoIP address object (with countries you don't want)
  • Dest: DMZ subnet
  • Service: ALL
AEK
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!