Geo blocking address command query

4 replies
1629 views

Dear All.

I have doubt why we configure -

config firewall address
edit "test-reserved
set country zz
end

thank you.

FortiGate

AEKAnswer

SuperUser

Hi Umesh

If you specify IN and ZZ as source address then both public IP addresses from India and local IP addresses will be allowed.

AEK

SuperUser

Hi Umesh

When you create this ZZ GeoIP address and use it in a firewall policy it means the address must be local (not public) in order to match, like 192.168.x.x, 172.16.x.x, 10.x.x.x and so.

AEK

UmeshAuthor

Explorer II

Hi AEK,

let suppose I have to allow only India address. Can I mention in the policy.

Source address - Geo-India and reserved location - country zz.

Thanks

AEKAnswer

SuperUser

Hi Umesh

If you specify IN and ZZ as source address then both public IP addresses from India and local IP addresses will be allowed.

AEK

Sign up

Login with SSO

Login to the community

Login with SSO