Limit access to a single external address over a certain port to only allow USA address to connect

[stevek1835]

Hello,

We're new in the CheckPoint world and had a question about limiting access.

We use a client based VPN that uses a TCP High Port to allow external connections to come in. We have cert based deployment to allow/deny connections, but we are looking to take that one step further and block all connections from outside of the USA to the external address and port that our client-based VPN uses.

Is there a way to do this in checkpoint - we're running a HA Pair of 6400 currently in our environment.