Exceptions to country blocking

Hey Paul Treadaway 

Country-blocking for the XG is applied on a per-firewall rule basis, therefore you would need to create an allow firewall rule above your deny country-blocking rule in order to "except" your desired traffic :

unlike the UTM where it is a global setting (where you would need to configure exceptions):

Please see this KB article for reference for the XG.

Regards,

Hey Flo,

based on your answer where in the firewall rule would you put the block country? Usually you want block countries from the entire network not just one rule. Also the reference you refer to shows how to create a block country rule not how to apply it to each rule?

I would personally put a block country rule at the top of the rule list.

Ian

Hey Flo,

based on your answer where in the firewall rule would you put the block country? Usually you want block countries from the entire network not just one rule. Also the reference you refer to shows how to create a block country rule not how to apply it to each rule?

I would personally put a block country rule at the top of the rule list.

Ian