Geolocation Address Groups

L0 Member

Does anyone know if you can create Geo-location address groups? I want to create a group for all the bad Countries instead of having to add all the Countries to every Geo-location rule.

 

Example: Add Russia, Crimea, North Korea, Iran, etc.. into a "Bad Countries" group  then apply that group into my inbound / outbound Geo-fencing rules.

As of now I have to add each bad Country individually to each Geo-fencing rule. I feel like this is a feature but can't figure it out.

 

Any guidance or recommendations on this would be very much appreciated.

L7 Applicator

It is not currently supported. Please contact your Palo Alto Networks SE, and ask them to have your vote-up on FR ID: 1284.

View solution in original post

L0 Member

I added this policy rule.  And added countries to it.  We are looking are reversing this, denying ALL countries except US/CA.

CGoulard_0-1729176496942.png