Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Blocking IP address

Jump to solution

Hi All,

How to proceed if I want to block an ip address immediately in FW. In both GUI and CLI is this possible?. Help me to learn. Thank You.

0 Kudos
1 Solution

Accepted Solutions
Highlighted

Hi,

this is possible via GUI and CLI. If you wan to solve this via CLI and you are running R80.20 have a look at this
R80.20 - IP blacklist in SecureXL 
For other Versions this would apply
Accelerated Drop Rules Feature in R75.40 and above 

If you want to do this via GUI you can use SAM Rules. Open SmartView Monitor -> Launch Menu -> Tools -> Suspicious Activity Rules -> Add. Further Reading here
How to create and view Suspicious Activity Monitoring (SAM) Rules

Use with caution 🙂

View solution in original post

4 Replies
Highlighted

Hi,

Please create SAM rule in firewall. It will immediately block IP. Refer SK112061 for more information.

Highlighted

Thank You Gaurav...

0 Kudos
Highlighted

Hi,

this is possible via GUI and CLI. If you wan to solve this via CLI and you are running R80.20 have a look at this
R80.20 - IP blacklist in SecureXL 
For other Versions this would apply
Accelerated Drop Rules Feature in R75.40 and above 

If you want to do this via GUI you can use SAM Rules. Open SmartView Monitor -> Launch Menu -> Tools -> Suspicious Activity Rules -> Add. Further Reading here
How to create and view Suspicious Activity Monitoring (SAM) Rules

Use with caution 🙂

View solution in original post

Highlighted

Thank You Benedikt for making clearly understand...