cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post

IPS Geo-Policy Whitelist by Domain Name

Jump to solution

Trying to see if I can create a exception by domain name so sites that are hosted in countries that are blocked can still be accessed.  Running into issue to where sites hosted in the cloud are getting blocked when they are being hosted in countries that are blocked via geo policy..

Thanks for any and all responses..

Bruce 

1 Solution

Accepted Solutions
Admin
Admin

Re: IPS Geo-Policy Whitelist by Domain Name

Jump to solution

This is not currently possible to the best of my knowledge as GeoProtection policies apply before the regular Access Policy. 

In R80.20 Gateways, you should be able to use country objects in the regular Access Policy and thus have more granular policies.

3 Replies
Admin
Admin

Re: IPS Geo-Policy Whitelist by Domain Name

Jump to solution

This is not currently possible to the best of my knowledge as GeoProtection policies apply before the regular Access Policy. 

In R80.20 Gateways, you should be able to use country objects in the regular Access Policy and thus have more granular policies.

Re: IPS Geo-Policy Whitelist by Domain Name

Jump to solution

so then I am guessing/assuming that you must create exceptions for the ranges for the cloud peeps..

0 Kudos

Re: IPS Geo-Policy Whitelist by Domain Name

Jump to solution

Hi Bruce,

you can use my script to use GEO objekts in firewall access rules.

GEO Location Objects in Firewall Policy (with Dynamic Objects) 

Regards,

Heiko

0 Kudos