topic Re: Blocking by Country Security Policy in GlobalProtect Discussions

Blocking by Country Security Policy

CoconutCrew — Thu, 01 Feb 2024 15:19:03 GMT

I've added several countries to a Security Policy that restricts access based on Location - however, I'm still seeing login attempts from those countries. What other steps can I take to ensure we don't see anymore attempts from the countries already added to the policy?

Re: Blocking by Country Security Policy

BPry — Thu, 01 Feb 2024 16:19:25 GMT

@CoconutCrew,

Take a look at the logs allowing the traffic and verify that your rules are being processed as you expect, because as long as the IP is being identified properly the only reason the traffic would be allowed is because it's hitting an allow rule.

Re: Blocking by Country Security Policy

CoconutCrew — Thu, 01 Feb 2024 19:17:25 GMT

Thank you. Will do.