Hi all,
Maybe late but I still have a request. As you may know HTTP(S) and SSH are the "honeypot" ports for crackers/script kiddies etc.
It would be great if you can narrow down allowed IP's based on countries. So you will be able to only allow traffic from certain countries or deny IP's traffic from certain countries.
There are some GeoIP-scripts but when it's put on the first machine (the ASG firewall) the traffic is dropped before it's entering the network or DMZ.
cheers...
