Geoblocking to one URL

[Seppel]

Hi We have several websites on a web server with one IP address. is it possible to use geobloking with fortigate to one website on the server? the other websites should not be affected.

Regards.

Andy

[Paul_W_Crane_FTNT]

Sorry about that, I misunderstood the question.  Dave is correct, you'll have to give that website a unique IP to use Geoblock for inbound connections.

[ede_pfau]

No, I don't think the WF is the right tool for what you are planning to do.

Geoblocking only looks at the source IP range, mapped to a country.

Webfilter only looks at the URL, and cannot be chained to another filter if the action is BLOCK. In general, WF would need to be used as a matching criterium in a policy, but a FGT can only match on addresses, ports, schedule and user.

Wait, a policy could match on an FQDN destination address. If you combine that with an country specific source address group you could create a policy which matches both to block that traffic. You could give that a try.

[Dave_Hall]

Could be wrong in this assumption, but it kinda looks like Andy is asking to block specified country hosts from accessing a hosted web site on a web server that is behind the fgt. 

[Seppel]

thanks for your contributions. it is as dave suspects, the webserver is in the dmz, the webserver has several websites on one IP address and i would like to allow outside access to this page only from selected countries. I have already done some tests, but none of them have brought the solution. I will probably have to add another ip address on the server

Greets

Andy