Exceptions to country blocking

Question

How do I add an exception to country blocking in the XG firewall? In UTM9 there was a separate tab for it, but I can't find anywhere in the XG UI.

FloSupport · Answer

Hey Paul Treadaway 
 Country-blocking for the XG is applied on a per-firewall rule basis, therefore you would need to create an allow firewall rule above your deny country-blocking rule in order to "except" your desired traffic : 
 
 unlike the UTM where it is a global setting (where you would need to configure exceptions): 
 
 Please see this KB article for reference for the XG. 
 Regards,

giomoda · Answer

Hey Paul. 
 Create a rule above the country block rule allowing those specif IP addresses/ranges/networks. Since firewall rules are matched top-to-bottom, that should allow the traffic. I too come from the UTM world and sometimes it's hard to let go of old habits, but for XG we need to think very differently on how to setup things as they are both very, very different products. 
 Regards, 
 Giovani