Created on 02-09-2010 08:01 AM
FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C
Honestly - I think that all of Asia should be permenently disconnected from the internet...Maybe Fortinet' s CEO Ken Xie will be not happy with that idea
regards
/ Abel
Bill ========== Fortigate 600C 5.0.12, 111C 5.0.2 Logstash 1.4.1
My guess is that Fortinet won' t offer the " block a country" approach directly on their product since they sell so much overseas.I disagree with that; blocking country' s IPs could lead to a fake sensation of control or security; there' re a lot of zombies IPs out there and many owners of those machines are not aware of yet; if you detect that several IPs are allocated to ISPs, for example, belonging to my country, do you block every traffic originated in Argentina? Another point is that IP<->country records are not full updated and could lead to wrong blocks; several carriers or big ISPs with global presence allocate blocks following their own criteria. An example of that is <country>.blackholes.us lists as a tactic to fight spam. Finally, you can do what do you want with your firewall, blocking everything and allowing some few networks, is your call. regards,
regards
/ Abel
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1084 | |
892 | |
535 | |
441 | |
152 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.