Nominated Discussion: Security Policy - US access only

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Community Team Member
Did you find this article helpful? Yes No
No ratings

This article is based on a discussion, Security Policy - US access only, posted by Cyber Elite expert @YParreno and answered by fellow Cyber Elite @BPry. Read on to see the discussion and solution!


I'm trying to configure a Security Policy to only allow US-region IP addresses to hit our network.   I added as a first rule to allow any untrust us region to destination untrust US region.  I am not sure if this is correct.  maybe I'm allowing all traffic within US, that probably is not supposed to be allowed.  

You could setup an entry that lists US as the source with the negate-source option enabled and set the application and service to any and the action to deny. This will drop any and all traffic that doesn't originate from the US, while allowing the rest of your rulebase to actually handle traffic.




Rate this article:
Register or Sign-in
Article Dashboard
Version history
Last update:
‎08-04-2022 02:11 PM
Updated by: