https://live.paloaltonetworks.com/t5/general-topics/geo-block-allow-only-one-country/m-p/142047#M48481 <P>How can I geo block all countries except the one where the firewall is. Looking for easier way rather than select all countries</P><P>except one and deny.</P> Thu, 09 Feb 2017 07:32:30 GMT inderjit21 2017-02-09T07:32:30Z https://live.paloaltonetworks.com/t5/general-topics/geo-block-allow-only-one-country/m-p/142047#M48481 <P>How can I geo block all countries except the one where the firewall is. Looking for easier way rather than select all countries</P><P>except one and deny.</P> Thu, 09 Feb 2017 07:32:30 GMT https://live.paloaltonetworks.com/t5/general-topics/geo-block-allow-only-one-country/m-p/142047#M48481 inderjit21 2017-02-09T07:32:30Z https://live.paloaltonetworks.com/t5/general-topics/geo-block-allow-only-one-country/m-p/142069#M48483 <P>Use the negate option in your "country" rule</P> Thu, 09 Feb 2017 07:51:04 GMT https://live.paloaltonetworks.com/t5/general-topics/geo-block-allow-only-one-country/m-p/142069#M48483 Retired Member 2017-02-09T07:51:04Z https://live.paloaltonetworks.com/t5/general-topics/geo-block-allow-only-one-country/m-p/142090#M48487 <P>as @Retired Member mentions you can either use the negate to target everything _except_ what is in the address, or you can simply use the normal policy to include _only_ what is in the address:</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="geo exclude include.png"><img src="https://live.paloaltonetworks.com/skins/images/B81F31A7B44084F326ABA63EFCA50C9D/responsive_peak/images/image_not_found.png" alt="geo exclude include.png" /></span></P> Thu, 09 Feb 2017 09:33:22 GMT https://live.paloaltonetworks.com/t5/general-topics/geo-block-allow-only-one-country/m-p/142090#M48487 reaper 2017-02-09T09:33:22Z