https://live.paloaltonetworks.com/t5/next-generation-firewall/v-wire-security-newbie/m-p/519284#M515 <P>Yes, allowing only the specific countries you want should work fine.&nbsp;</P> Wed, 26 Oct 2022 19:02:48 GMT rmfalconer 2022-10-26T19:02:48Z https://live.paloaltonetworks.com/t5/next-generation-firewall/v-wire-security-newbie/m-p/518833#M504 <P>we have a v-wire setup where we are controlling traffic to a secondary firewall w our 820. as its sitting between ISP and the site secondary firewall (sonicwall) we created a rule that negates all but some countries we do business with and that negation drops the traffic.</P> <P>would it be possible to accomplish the same with just creating the allowed rule (there already im assuming defaulted when we created the v-wire setup) were we set the specific countries to come in? is it safe to assume that only those countries will have passage through the vwire and all others will be dropped?</P> <P>thanks for your time.</P> Sat, 22 Oct 2022 14:56:25 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/v-wire-security-newbie/m-p/518833#M504 JGaitan 2022-10-22T14:56:25Z https://live.paloaltonetworks.com/t5/next-generation-firewall/v-wire-security-newbie/m-p/519284#M515 <P>Yes, allowing only the specific countries you want should work fine.&nbsp;</P> Wed, 26 Oct 2022 19:02:48 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/v-wire-security-newbie/m-p/519284#M515 rmfalconer 2022-10-26T19:02:48Z