after adding rules at the top of my firewall rules and as indicated by SOPHOS support I find IPs belonging to country still able to get through in the logs.
Specifically, I added a rule to block in and out all IPs from Russia, so I created a rule as per documentation blocking :RUSSIAN FEDERATION" as defined in the sophos firewall (XG135).
A few days after in checking the logs I find the following IPs still getting thru.
186.2.171.2
193.124.7.9
45.135.232.161
46.161.11.144
46.161.11.6
91.240.118.43
94.232.40.94
These IPs are all identified as belonging to the russian federation as well, nevertheless they got thru the blocking rule.
I had to add specific rules to block these IPs.
Please look into it.
This thread was automatically locked due to age.