IPS Geo-Policy Whitelist by Domain Name

[Bruce_Pruitte]

Trying to see if I can create a exception by domain name so sites that are hosted in countries that are blocked can still be accessed.  Running into issue to where sites hosted in the cloud are getting blocked when they are being hosted in countries that are blocked via geo policy..

Thanks for any and all responses..

Bruce 

[PhoneBoy · Accepted solution]

This is not currently possible to the best of my knowledge as GeoProtection policies apply before the regular Access Policy. 

In R80.20 Gateways, you should be able to use country objects in the regular Access Policy and thus have more granular policies.

[Bruce_Pruitte]

so then I am guessing/assuming that you must create exceptions for the ranges for the cloud peeps..

[HeikoAnkenbrand]

Hi Bruce,

you can use my script to use GEO objekts in firewall access rules.

GEO Location Objects in Firewall Policy (with Dynamic Objects) 

Regards,

Heiko