GEO blocking is not working properly

Forum|Forum|3 years ago
November 30, 2022
5 replies
4388 views

I have created GEO blocking policy on top of the policies , I have blocked Russia specifically. But the following ip from Russia 5.8.16.163 , As per GEO blocking policy its not blocked. I already enabled match-vip on this policy.

Please help why Fortinet not able to block the geo block correctly

Toshi_Esumi

SuperUser

There are two separate policy sets:

- Firewall Policy (config firewall policy)

- Local-in Policy (config firewall local-in-policy)

Firewall Policy handles traffic coming in one interface and going out another interface. Local-in Policy handles traffic hits the FGT itself like IPsec, SSL VPNs, and other FGT initiated traffic's returns.

Did you put the your GEO blocking policy in the local-in-policy? Or firewall policy?

Toshi

chakravarthinakkaAuthor

New Member

it is firewall policy , traffic coming from outside to inside

Toshi_Esumi

SuperUser

So you're saying you have some VIP policies to allow outside parties to come through the FGT and forwarded to internal servers like Web server, FTP server, etc.

Then the traffic from Russia is actually hitting those internal servers, right?

You need to share the actual policy GUI or CLI by masking some proprietary info as well as the GEO address definition the policy is using.

Toshi

Sign up

Login with SSO

Login to the community

Login with SSO