How to configure geographical blocking in a SOPHOS XG firewall

Question

With all the global turmoil we have a desire to block traffic from bad actor countries. Such as China, North Korea, Iran and so forth. Is there a way to do this in the XG firewall?

Leon Friend2 · Accepted Answer

Hi John, 
 So have a look in the rule configuration under source and destination networks, you may need to change the filter from all so you can see them if you want to look at the list. However, you should just be able to type the country or region name. 
 
 So depending on your rule base you can either allow traffic to or from specific countries or more generally allow traffic and block traffic to or from specific countries. 
 Hope that helps

rfcat_vk · Answer

Hi John, 
 you select Source WAN -> then ZONE scroll down countries. 
 Ian

rfcat_vk · Answer

Hi, 
 yes there is using the predefined country groups. In the GUI - Hosts and Services - Country Groups. You set up an incoming reject rule at the top of your rule list and either select the countries or create your own policy group of countries. 
 Ian