simple blocking many IP

IldarSultanov — Fri, 03 Jun 2022 07:44:53 GMT

Hello.

What is the best way to block over 4000 IP: use fw sam, sim dropcg or adding object throw cli and creating blocking rules?

Which method will affect perfomance to gateway more then other?

Re: simple blocking many IP

Sorin_Gogean — Fri, 03 Jun 2022 11:52:16 GMT

Hey,

So, we were using SAM block in the past on IP's detected by SmartEvent rules.

Problem we faced is that the 600K limit of SAM rule was filling pretty quick. So in order to be able to block those IP's, I'm looking for a solution where we add IP's to an Generic DataCenter Object (sk167210), and use that in a FWL block rule.

Hopefully will work for you too.

Thank you,

topic Re: simple blocking many IP in Firewall and Security Management

simple blocking many IP

Re: simple blocking many IP