How to configure geographical blocking in a SOPHOS XG firewall

Hi,

yes there is using the predefined country groups. In the GUI - Hosts and Services - Country Groups. You set up an incoming reject rule at the top of your rule list and either select the countries or create your own policy group of countries.

Ian

Out of curiosity: why use a reject rule in stead of a drop rule?

I'd rather not give any response to these 'attackers'.

Only because someone suggested it.

Only because someone suggested it.

I suggested it, but I agree with your suggestion.

One thing to watch while trying to block bad countries is that not all bad sites even with country suffix are based in their home country from my experience a number use the Amazon servers.

Ian

Thank you for clearing that up.

Lan,

I agree but its all about baby steps and we never do business out side the country so why not block.

Thank you for the assistance.

Hi John,

you will be surprised how many sites get blocked which in most situations don't matter but some do even though you think they are locally based.

Ian