Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Erakul_Siddhart
Participant
Jump to solution

Blocking IP address

Hi All,

How to proceed if I want to block an ip address immediately in FW. In both GUI and CLI is this possible?. Help me to learn. Thank You.

0 Kudos
1 Solution

Accepted Solutions
Benedikt_Weissl
Advisor

Hi,

this is possible via GUI and CLI. If you wan to solve this via CLI and you are running R80.20 have a look at this
R80.20 - IP blacklist in SecureXL 
For other Versions this would apply
Accelerated Drop Rules Feature in R75.40 and above 

If you want to do this via GUI you can use SAM Rules. Open SmartView Monitor -> Launch Menu -> Tools -> Suspicious Activity Rules -> Add. Further Reading here
How to create and view Suspicious Activity Monitoring (SAM) Rules

Use with caution 🙂

View solution in original post

4 Replies
Gaurav_Pandya
Advisor

Hi,

Please create SAM rule in firewall. It will immediately block IP. Refer SK112061 for more information.

Erakul_Siddhart
Participant

Thank You Gaurav...

0 Kudos
Benedikt_Weissl
Advisor

Hi,

this is possible via GUI and CLI. If you wan to solve this via CLI and you are running R80.20 have a look at this
R80.20 - IP blacklist in SecureXL 
For other Versions this would apply
Accelerated Drop Rules Feature in R75.40 and above 

If you want to do this via GUI you can use SAM Rules. Open SmartView Monitor -> Launch Menu -> Tools -> Suspicious Activity Rules -> Add. Further Reading here
How to create and view Suspicious Activity Monitoring (SAM) Rules

Use with caution 🙂

Erakul_Siddhart
Participant

Thank You Benedikt for making clearly understand...

(1)

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events