Geo Blocking

[Leandro_Nicolet]

Hi Folks,

We are looking to implement Geo blocking and wondered if Checkpoint works with the US Treasury Office of Foreign Assets Control OFAC list of sanctioned IP addresses ?

Any one know ?

[G_W_Albrecht]

No - at least the new sk126172: Geo Location objects as network objects in R80.20 are from MaxMind.

[Leandro_Nicolet]

ok thanks.

[TP_Master]

Hi,
Check Point is using several feeds to include an up-to-date Geo-location mapping. Starting R80.20 the recommendation is to use Geo Location Objects as described in https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...)

Does OFAC provide a list of *IPs*? or a list of countries?

[bporter62_1]

OFAC updates institutions once a month, I believe, with IPs that they deem off-limits. It's been four years since I've worked at a financial institution, but yes, OFAC issues a list of IPs they say you must not interact with. 

[Sorin_Gogean]

Hello @bporter62_1 ,

If you have IP list, then Generic DataCenter Object can help here, or the new available feature from R81.20 where you feed directly the IP feeds into objects, search on CheckMates and you'll see what I meant.

Thank you,