Create a country-based firewall rule

Create rules to manage traffic to or from a country or group of countries.

To block traffic from a country, do as follows:

  1. Go to Rules and policies > Firewall rules. Select IPv4 or IPv6 protocol and select Add firewall rule. Select New firewall rule.
  2. Create a rule using the following parameters:
    OptionDescription

    Rule name

    Block country

    Rule position

    Top

    Action

    Drop

    Rule group

    None

    Source zones

    Any

    Source networks and devices

    Select the country you want to block.

    During scheduled time

    All the time

    Destination zones

    Any

    Destination networks

    Any

    Services

    Any

    The following image shows an example country blocking rule:


    Image showing the settings for an example country based firewall rule

    You must set Source zones and Destination zones to Any to use country blocking effectively.

  3. Click Save.