Geolocation Issue

[jayanthgowda]

Hi,

Our firewall’s geolocation policy does not permit access from Malta. However, we have noticed that some IP addresses from Malta are being allowed through. Could you provide any insights into why this might be happening and how we can resolve this issue?

[dingjerry_FTNT]

Hi @jayanthgowda ,

How did you tell that some Malta IPs got allowed?  Do you have any FGT logs?  If yes, please provide the logs and FGT config.

[jayanthgowda]

Hi @dingjerry_FTNT 

I am unable to retrieve the logs as more than 60 days have passed since the event. During the festive season, we had configured the firewall to allow only IPs from the UK using a geolocation policy, but we noticed IPs from Malta.

[dingjerry_FTNT]

Hi @jayanthgowda ,

"but we noticed IPs from Malta"

How? via logs?  Did you see it hitting the same firewall policy allowing the UK in logs?   If yes, can you share the firewall policy?

[AEK]

Hi Jay

It is difficult to help with such few information. But basically you need to review your firewall rules if there are some that are allowing access from Malta (or from everywhere). You also need to reproduce the issue and collect the logs, to make sure which policy has allowed the access.