Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
wrosler
New Contributor

Geo blocking

How can i block all acess from China to my FG? I tried to find guides on the net with no success. Im getting hammered with chinese ip attacks to my nas and would just like to block out the entire country. Fortigate 60C v5.0,build0128 Werner
2 REPLIES 2
Dave_Hall
Honored Contributor

Currently not in front of any fgt device running 5.0.x but the procedure should be similar: create a firewall address with type Geography (set to China) and use that in a firewall policy (WAN->Internal) as the source address on the WAN Interface. Set the rule to block then move this policy up in the firewall chain.

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

wrosler
New Contributor

Great!!! Thanks a lot - one happy camper :) werner