Skip to main content
waxon
New Member
April 21, 2024
Question

GeoIP Block Not working

  • April 21, 2024
  • 3 replies
  • 1904 views

Hi to all!

Im coming here to ask your help

I have some VIP's and vpn ssl limited with GEOIP objects, it worked fine for long time, but in the lasts weeks this stop working and is allowing the post to be reached from anywhere and now im getting expose to bruteforce attacks and scanners constantly

I doble check the address object and rules, they are "ok", also check the geo database is updated and if i check the "diag geoip geoip-query" or "diag geoip ip2country" they are correct, the coming ip are from country i have bloqued.

Anyone experience this?

Regards

3 replies

AEK
SuperUser
SuperUser
April 22, 2024

Hi Waxon

Which FortiOS release?

Try remove GeoIP object from the policy, validate, then add it back and validate again.

AEK
hbac
Staff
Staff
April 22, 2024

Hi @waxon,

 

Can you provide the logs of failed login (bruteforce)? 

 

Regards, 

ede_pfau
SuperUser
SuperUser
April 22, 2024

and in the policy using a VIP, you have

"set match-vip enable"

?

otherwise, the local-in policy will not have any effect on VIP policies.

There's a couple of KB articles on this topic, as well as recent forum posts.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!