Technical Tip: Allow creation of ISDB objects with regional information

[bpriya]

Description
The article describes how to configure ISDB objects with regional information in the policy.

Solution

From GUI.

Go to Policy & Objects -> Internet Service Database, select 'Create New' and select 'Geographic Based'.

Go to Policy & Objects > Firewall Policy, create a new policy, for destination, select 'Internet Service' and select the ISDB object created.

From CLI.

Create Internet-service-name from CLI.

# config firewall internet-service-name
    edit "ISDB_Regionbased
        set type location
        set internet-service-id 393320
        set country-id 356
        set region-id 860
        set city-id 2139
    next
end

Create policy with Internet-service-name object.

# config firewall policy
    edit 1
        set name "Allow_Amazon_AWS"
        set uuid 6085871a-9457-51ea-c345-d2467146f17e
        set srcintf "port2"
        set dstintf "port1"
        set srcaddr "all"
        set internet-service enable
        set internet-service-name "ISDB_Regionbased"
        set action accept
        set schedule "always"
        set nat enable
    next
end