Grouping Countries

[dwoolley]

Hello,

I've been asked to block certain countries...

- All of Europe except Spain

- All of Asia (except Japan, Australia, Korea, Singapore, Taiwan)

- All of Africa

I figured I could add those countries to a "Denied Countries" group to use in a security policy but I don't see the countries listed when I try to create my address group... they only exist in the Regions section.  Is there any way I can create an address group for the countries?  Is there an easier way to do what I'm trying to do without having to manually go through all of the countries and add individually?  Would be nice if there were predefined Region groups (i.e. Europe, Asia, Africa, etc).

Thanks in advance for your help/advice!

-Dave

[bat]

Hi dwoolley

You can go through the following similar discussion:

Re: Is it possible to group countries?

Thanks

[hshah]

Hi Dwoolley,

Its not possible to create Address Group for Countries. We have open FR for the same.

Priority: High

FR ID: 1734

Please contact your sales engineer to vote for you.

Regards,

Hardik Shah

[HULK]

Adding to it:

Subject: Multiple Countries in a Single Object

Priority: Medium

FR ID: 1284

You can request your local SE so he can also add you to this list.

Thanks

[mmmccorkle]

HULK and  hshah are both correct.

There has been a Feature Request submitted for this exact feature. At this time, we are not able to group regions.

An alternative would be to create your own region object, with multiple regions and IP address ranges defined inside, but you might as well go ahead and add them one by one to the rule...