Geoblocking

The APM Geoblocking feature allows you to block traffic from many IP addresses that are currently known to belong to networks in other regions or countries.

Firewall policy must have a Geo Group defined as source or as destination object.

Geo group details can be seen in the Geoblocking tab by selecting an appropriate group.

Once selected, the list and map will populate the countries/regions defined in the group.

You can remove and add countries and regions on the list, and the map will reflect the updated selection. Once ready, you Submit a change.

After submitting the change, you will be directed to the Geoblocking Request ticket page. Enter the required details, and review the Request section that lists all of the changes made on the previous screen.

You can still add any country from the dropdown list and/or remove it by clicking the trash bin icon.