Blocking IP address

[Erakul_Siddhart]

Hi All,

How to proceed if I want to block an ip address immediately in FW. In both GUI and CLI is this possible?. Help me to learn. Thank You.

[Gaurav_Pandya]

Hi,

Please create SAM rule in firewall. It will immediately block IP. Refer SK112061 for more information.

[Erakul_Siddhart]

Thank You Gaurav...

[Benedikt_Weissl · Accepted solution]

Hi,

this is possible via GUI and CLI. If you wan to solve this via CLI and you are running R80.20 have a look at this
R80.20 - IP blacklist in SecureXL 
For other Versions this would apply
Accelerated Drop Rules Feature in R75.40 and above 

If you want to do this via GUI you can use SAM Rules. Open SmartView Monitor -> Launch Menu -> Tools -> Suspicious Activity Rules -> Add. Further Reading here
How to create and view Suspicious Activity Monitoring (SAM) Rules

Use with caution 🙂

[Erakul_Siddhart]

Thank You Benedikt for making clearly understand...