This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Geo-blocking on DNAT reporting

Hi All,

One of our clients have a requirement that they will need to generate reports of blocked countries attempting access to DNAT's.

I have made a test scenario, opened a 3389 DNAT to any and then country blocked Romania i then attempted to connect via a Romanian VPN and wollah im blocked.
I can see the packet denied in the live log viewer however i cannot see it anywhere in the reporting or figure out how to setup custom reporting to show the country of origin and attempt to access this IP on this port ect.

Any idea how we can do this?

Thanks,
Anthony

This thread was automatically locked due to age.

0 rfcat_vk over 6 years ago

Hi Anthony,

have you had a look at the server protection report in the customer reports?

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 sL4sha over 6 years ago in reply to rfcat_vk

Hi Ian,

I just re looked through all the reporting maybe im looking in the wrong area?
Do you have the path i should follow to get to customer reports?

Thanks,
Anthony.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 6 years ago in reply to sL4sha

Hi Anthony,

stupid spell checker changed custom to customer.

Reports -> Show report settings -> add -> Report groups -> Web server protection.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 sL4sha over 6 years ago in reply to rfcat_vk

Thanks mate thats pretty cool didn't know you could do this but unfortunately this doesn't have any information either.
Because its a DNAT rule to a internal IP address and not using the webserver part of the XG so its just dropping the packet and not getting sucked into the reporting database.
Cancel
Vote Up 0 Vote Down

Cancel