topic Re: Blocking IP address in Firewall and Security Management

Blocking IP address

Erakul_Siddhart — Wed, 20 Feb 2019 11:20:23 GMT

Hi All,

How to proceed if I want to block an ip address immediately in FW. In both GUI and CLI is this possible?. Help me to learn. Thank You.

Gaurav_Pandya — Wed, 20 Feb 2019 12:14:14 GMT

Hi,

Please create SAM rule in firewall. It will immediately block IP. Refer SK112061 for more information.

Benedikt_Weissl — Wed, 20 Feb 2019 12:22:17 GMT

Hi,

this is possible via GUI and CLI. If you wan to solve this via CLI and you are running R80.20 have a look at this
R80.20 - IP blacklist in SecureXL
For other Versions this would apply
Accelerated Drop Rules Feature in R75.40 and above

If you want to do this via GUI you can use SAM Rules. Open SmartView Monitor -> Launch Menu -> Tools -> Suspicious Activity Rules -> Add. Further Reading here
How to create and view Suspicious Activity Monitoring (SAM) Rules

Use with caution 🙂

Erakul_Siddhart — Wed, 20 Feb 2019 12:42:17 GMT

Thank You Gaurav...

Erakul_Siddhart — Wed, 20 Feb 2019 12:43:43 GMT

Thank You Benedikt for making clearly understand...