Skip to main content
neok
New Member
February 4, 2021
Question

Country GeoIP source based policy

  • February 4, 2021
  • 1 reply
  • 2181 views

Hi, I have been using FortiGate for a week. So I am a bit new. I have a question: I want to know if I can restrict access to my FTP server so that the port forwarding policy only allows connections from IPs from a certain country/countries.

I can't find how to do it, if it is possible to do it.

Thank you very much in advance.

Best regards, Gabriel

1 reply

emnoc
New Member
February 4, 2021

easy as 1-2-3

 

config firewall address edit "USA" set type geography set country "US" next end

 

config firewall policy edit 0  set srcintf "wan1" set dstintf "lan" set srcaddr "USA" set action accept set schedule "always" set service "FTP" next end

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.