Troubleshooting Tip: Private IP is getting blocked by GEO-IP

[Ahmed_Galal]

Description	This article describes how to resolve a connection getting blocked by GEO-IP when the source is a private IP.
Scope	FortiWeb.
Solutionn	GEO-IP is a security feature that allows access based on the client's Location/Country. However, in some cases, the client might be using a private IP and still gets blocked by GEO-IP:   This issue can be resolved by removing the category 'unknown country/region' from the Selected Geolocation List. CLI commands: config waf geo-block-list     edit "Test"         set block-period 600         set severity High             config country-list                 edit 1                     set country-name China                 next                 edit 2                     set country-name "Russian Federation"                 next                 edit 3                     set country-name "Unknown Country/Region"                 next             end     next end To remove entry number 3: config waf geo-block-list     edit "Test"         config country-list         delete 3         end end Related document: GEO IP - Blocklisting & whitelisting countries & regions