GEO Plicy for a single access rule

[Rahul_Borah]

Hi Experts,

 Is there any option to allow only one country traffic to access a single destination Ip (Server) in Checkpoint R80.

Regards,

R.B

[G_W_Albrecht]

Why not ? You have to create rules for this and it will work!

[Rahul_Borah]

Thanks for reply, my concern is, In my checkpoint i have around 100 access rules, now i want to create a GEO policy only for one access rule. The access rule is like source ANY and destination is my internal server. And now i want create a GEO policy for this rule, i want to allow only one cuntry traffic to access the internal server. Is this possible ? If yes then how !!!

[G_W_Albrecht]

See details in sk126172: Geo Location objects as network objects in R80.20

[Tal_Paz-Fridman]

For Security Gateways R80.20 and above you can use Geo Location Updatable Objects directly in the Access Control rulebase.

[Yatiraj_Panchal]

Hi, 

Yes, you can do this through policies. 

[Rahul_Borah]

Hi thanks for your reply.

Can you please share the configuration steps for the same.

[Tal_Paz-Fridman]

From the Source or Destination cells press on the picker (+ icon).

On the right side select Import > Updatabale Objects > GEO Locations - and select the relevant country.

[Yatiraj_Panchal]

Hi Rahul,

Go to that specific access rule and click + in the SOURCE then below one will prompt on your screen. 

Then click on import and then click on an updatable object like the below snip

then install policy, it will surely works for you.