Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Country group

Countries and regions are grouped based on their continent into default country groups.

You can allow or block traffic based on the source and destination countries, regions, or their groups in firewall rules. You can also route and translate traffic based on these.

You can add, edit, and delete country and region groups.

Countries and regions

  • Regions that haven't been recognized as countries either currently or in the recent past may not be part of the default country groups, for example, Bonaire, Curacao, South Sudan, and Sint Maarten. You can manually add these to default and custom groups.
  • To search for a country or region, enter its name or the two-letter alpha-2 code.

Usage of country groups

  • To manually refresh the list of configurations that use country groups, click the refresh Refresh the usage. button next to Usage.
  • To see the configurations that use a country group, click the number under the Usage column. A pop-up appears.
  • Click the rule you want to edit in the pop-up.

    Configurations in which country group is in use.