Brute force attacks on Mobile Access

[SubZer0]

In the last week, I've noticed regular brute force attacks on Mobile Access in the logs. I have 2FA enabled on Mobile Access and brute force protection configured through SmartEvent.

Is there anything else I could do to improve security? We only access Mobile Access from one country. Would it make sense to set up an access rule to restrict access?

[PhoneBoy]

Yes, though HTTPS is typically allowed through an implied rule.
You might have to implement this using the Dos Mitigation commands: https://support.checkpoint.com/results/sk/sk112454