Geo blocking

Author
wrosler
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2013/08/20 07:16:51
  • Status: offline
2013/08/20 07:21:07 (permalink)
0

Geo blocking

How can i block all acess from China to my FG?

I tried to find guides on the net with no success.
Im getting hammered with chinese ip attacks to my nas and would just like to block out the entire country.

Fortigate 60C v5.0,build0128

Werner
#1

2 Replies Related Threads

    Dave Hall
    Expert Member
    • Total Posts : 1310
    • Scores: 134
    • Reward points: 0
    • Joined: 2012/05/11 07:55:58
    • Location: Canada
    • Status: offline
    RE: Geo blocking 2013/08/20 10:16:18 (permalink)
    0
    Currently not in front of any fgt device running 5.0.x but the procedure should be similar: create a firewall address with type Geography (set to China) and use that in a firewall policy (WAN->Internal) as the source address on the WAN Interface. Set the rule to block then move this policy up in the firewall chain.

    Attached Image(s)


    NSE4/FMG-VM64/FortiAnalyzer-VM/5.2/5.4 (FWF40C/FW92D/FGT200B/FGT200D/FGT101E)/ FAP220B/221C
    #2
    wrosler
    New Member
    • Total Posts : 3
    • Scores: 0
    • Reward points: 0
    • Joined: 2013/08/20 07:16:51
    • Status: offline
    RE: Geo blocking 2013/08/21 00:50:56 (permalink)
    0
    Great!!!

    Thanks a lot - one happy camper :)

    werner
    #3
    Jump to:
    © 2019 APG vNext Commercial Version 5.5