Different VPN access for different countries users connect from.

[doom]

Good afternoon! We have many VPN users connecting from different countries. We currently need to restrict VPN access based on the user's country of origin.

For example, if a user connects from the US, they have access to everything, but if they connect from Afghanistan, they only have web access to the corporate portal.

Is there a way to implement this? 7000 Appliance R82.

[the_rock]

See if the post I made about it last year helps.

https://community.checkpoint.com/t5/Remote-Access-VPN/Geo-VPN-blocking/m-p/214040#M10593

[doom]

thank you for the reply. Its not what we want to achive but yes its good workaround solution. It's okay to change kernel settings yourself, we won't lose tech support?

[G_W_Albrecht]

Should be safe if you first test it on-the-fly to make it permanent if it’s successful, see the relevant SKs fir advice!

[PhoneBoy · Accepted solution]

Not aware of a way to achieve this on Quantum Security Gateways currently.
However, Harmony SASE can do this.