Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Bruce_Pruitte
Participant
Jump to solution

IPS Geo-Policy Whitelist by Domain Name

Trying to see if I can create a exception by domain name so sites that are hosted in countries that are blocked can still be accessed.  Running into issue to where sites hosted in the cloud are getting blocked when they are being hosted in countries that are blocked via geo policy..

Thanks for any and all responses..

Bruce 

1 Solution

Accepted Solutions
PhoneBoy
Admin
Admin

This is not currently possible to the best of my knowledge as GeoProtection policies apply before the regular Access Policy. 

In R80.20 Gateways, you should be able to use country objects in the regular Access Policy and thus have more granular policies.

View solution in original post

3 Replies
PhoneBoy
Admin
Admin

This is not currently possible to the best of my knowledge as GeoProtection policies apply before the regular Access Policy. 

In R80.20 Gateways, you should be able to use country objects in the regular Access Policy and thus have more granular policies.

Bruce_Pruitte
Participant

so then I am guessing/assuming that you must create exceptions for the ranges for the cloud peeps..

0 Kudos
HeikoAnkenbrand
Champion Champion
Champion

Hi Bruce,

you can use my script to use GEO objekts in firewall access rules.

GEO Location Objects in Firewall Policy (with Dynamic Objects) 

Regards,

Heiko

➜ CCSM Elite, CCME, CCTE ➜ www.checkpoint.tips
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events