simple blocking many IP

[IldarSultanov]

Hello.

What is the best way to block over 4000 IP: use fw sam, sim dropcg or adding object throw cli and creating blocking rules?

Which method will affect perfomance to gateway more then other? 

[Sorin_Gogean]

Hey,

So, we were using SAM block in the past on IP's detected by SmartEvent rules.

Problem we faced is that the 600K limit of SAM rule was filling pretty quick. So in order to be able to block those IP's, I'm looking for a solution where we add IP's to an Generic DataCenter Object (sk167210), and use that in a FWL block rule.

Hopefully will work for you too.

Thank you,