topic Geographic block by region, China - CN blocked but need to ensure Taiwan is available for traveler in General Topics

Geographic block by region, China - CN blocked but need to ensure Taiwan is available for traveler

RobYoung — Thu, 04 Apr 2019 17:42:20 GMT

We currently block incomming regions such as China - CN however we have some traveling teammates that will need to be able to VPN connect back to us in US who will be in Tawain.

The crux of my question is if CN is blocked but TN= Taiwan ROC by the abbeviation lookup is NOT blocked will this traffic be allowed if attemped from Taiwan?

I could find no documentation advising if China is set if that overrides all areas including Taiwan.

Thank you for your help.

Re: Geographic block by region, China - CN blocked but need to ensure Taiwan is available for travel

Brandon_Wertz — Thu, 04 Apr 2019 21:06:28 GMT

I would have to assume that based on your own information you provided it would be allowed.

China is defined as CN, which you are blocking. Traffic coming from this IP space would be blocked in the FW.

Taiwan is defined as TW, which you currently don't block. Traffic coming from this IP space would be allowed in your FW.

The more accurate question would be, what's the IP space as defined in the FW and what's the IP space the users will be coming from while in Taiwan? If that space Palo has defined as China space then they'll be blocked.