topic Re: Multiple Geo Locations In Manual Policy in Spark Firewall (SMB)

Multiple Geo Locations In Manual Policy

Jon_AK — Wed, 03 May 2023 01:56:02 GMT

With a Quantum Spark 1575 & R81.10.05, is it possible to add multiple countries into a single access policy rule? I created a incoming & outgoing block rule, imported the updatable object geo locations & selected multiple countries to block but, after closing the selection screen, the rule still shows the source as any.

Re: Multiple Geo Locations In Manual Policy

the_rock — Wed, 03 May 2023 02:18:51 GMT

I just tried it and worked fine. You just need to find the right updatable object and when it shows in the list, double click on it, I have a feeling thats why it failed for you.

Andy

Re: Multiple Geo Locations In Manual Policy

G_W_Albrecht — Thu, 04 May 2023 14:29:56 GMT

No - i did find no way for this when locally managed, you have only one object per rule and there are no groups for updatable objects. Only possible for centrally managed SMBs in Dashboard.

Re: Multiple Geo Locations In Manual Policy

Jon_AK — Mon, 08 May 2023 21:21:03 GMT

I'm happy to hear I wasn't blind in one eye & not able to see out of the other when trying to find answers in product documentation 🙂 Yes, I pretty much resigned myself to having a single rule per updatable object. It would be really nice if it could be made this way for locally managed instances.... Thought maybe the latest update I had installed yesterday would have this but alas, no joy...

Re: Multiple Geo Locations In Manual Policy

Amir_Ayalon — Wed, 10 May 2023 10:04:35 GMT

soon

when locally SD-WAN will be available, you will be able to have Multiple Geo Locations in one rule

Re: Multiple Geo Locations In Manual Policy

G_W_Albrecht — Wed, 10 May 2023 10:40:35 GMT

Currently it is not possible to use more than one object in rules of locally managed SMBs - centrally managed in Dashboard you can add as many objects in one rules source o.a. as you want. The limitation is annoying here as there is no possibility to create groups of Updateable Objects, in the way service a.o. groups can be created to include in a rule.