Skip to main content
bayuaw
Visitor III
November 17, 2023
Solved

Geo Blocking

  • November 17, 2023
  • 2 replies
  • 1681 views

Hello,

 

what if admin from the same country that apply geoblocking?Will that be a problem?

Best answer by smaruvala

Hi,

 

- It should not be a problem as we depend on Local-in-policies to restrict administrative access(HTTPS, PING, SSH, and others) in the interface level of the Firewall. 

- Usually security policies are between the interfaces say port1 to port2. So the management communication towards the Firewall will not match.

- However when you are configuring the geo location block make sure you dont have any policy which can block this communication.

- Make sure you have some kind of alternate access to the firewall when you make this changes as a precautionary measure. 

 

Regards,

Shiva

 

2 replies

smaruvala
Staff
smaruvalaAnswer
Staff
November 17, 2023

Hi,

 

- It should not be a problem as we depend on Local-in-policies to restrict administrative access(HTTPS, PING, SSH, and others) in the interface level of the Firewall. 

- Usually security policies are between the interfaces say port1 to port2. So the management communication towards the Firewall will not match.

- However when you are configuring the geo location block make sure you dont have any policy which can block this communication.

- Make sure you have some kind of alternate access to the firewall when you make this changes as a precautionary measure. 

 

Regards,

Shiva

 

adimailig
Staff & Editor
Staff & Editor
November 17, 2023

@bayuaw 

Are you implementing restriction on Administration access to Fortigate from Internet?
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Limit-administration-access-by-geography-location/ta-p/190180

Or are you implementing GeoIP Blocking for the traffic that passing through the Fortigate going to Internal Network?
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-by-country-or-geolocation/ta-p/196741

If it is the first one, if administrator IP is from block country then it is will be blocked by the local-in-policy. 



Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!