Skip to main content
duffy7
New Member
February 3, 2026
Question

Do You GeoIP Filter?

  • February 3, 2026
  • 1 reply
  • 98 views

Do you GeoIP filter? If so, how do you handle Microsoft adresses?

We do GeoIP filtering, basically allowing traffic to US and a few other countries IPs, while denying everything else. Recently this has started to become a significant problem, specifically due to addresses in Microsoft datacenters.

It seems that either these sites are being bounced to data centers around the globe, or Fortinet's GeoIP database is miscategorizing addresses as being in countries that they are not.

We're having valid traffic suddenly blocked because the Microsoft IP was supposedly in an obscure-to-us country. How are you handling this?

1 reply

funkylicious
SuperUser
SuperUser
February 3, 2026

only inbound geoip filtering, outbound not so much but you can do ISDB instead for avoiding so much pita.

as for you problem, maybe https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-GeoIP-address-matching-algorithm-when-using/ta-p/419578 would help 

"jack of all trades, master of none"
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!