- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Geo blocking address command query
Dear All.
I have doubt why we configure -
config firewall address
edit "test-reserved
set country zz
end
thank you.
Solved! Go to Solution.
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Umesh
If you specify IN and ZZ as source address then both public IP addresses from India and local IP addresses will be allowed.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Umesh
When you create this ZZ GeoIP address and use it in a firewall policy it means the address must be local (not public) in order to match, like 192.168.x.x, 172.16.x.x, 10.x.x.x and so.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi AEK,
let suppose I have to allow only India address. Can I mention in the policy.
Source address - Geo-India and reserved location - country zz.
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Umesh
If you specify IN and ZZ as source address then both public IP addresses from India and local IP addresses will be allowed.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @Umesh,
Below is an example of a geography address object for India.
config firewall address
edit "India"
set type geography
set country "IN"
next
end
Regards,