Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Leandro_Nicolet
Contributor

Geo Blocking

Hi Folks,

We are looking to implement Geo blocking and wondered if Checkpoint works with the US Treasury Office of Foreign Assets Control OFAC list of sanctioned IP addresses ?

Any one know ?

5 Replies
G_W_Albrecht
Legend
Legend

No - at least the new sk126172: Geo Location objects as network objects in R80.20 are from MaxMind.

CCSE CCTE CCSM SMB Specialist
Leandro_Nicolet
Contributor

ok thanks.

TP_Master
Employee
Employee

Hi,
Check Point is using several feeds to include an up-to-date Geo-location mapping. Starting R80.20 the recommendation is to use Geo Location Objects as described in https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...)

Does OFAC provide a list of *IPs*? or a list of countries?
bporter62_1
Explorer

OFAC updates institutions once a month, I believe, with IPs that they deem off-limits. It's been four years since I've worked at a financial institution, but yes, OFAC issues a list of IPs they say you must not interact with. 

0 Kudos
Sorin_Gogean
Advisor

Hello @bporter62_1 ,

 

If you have IP list, then Generic DataCenter Object can help here, or the new available feature from R81.20 where you feed directly the IP feeds into objects, search on CheckMates and you'll see what I meant.

 

Thank you, 

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events