Is it possible to group countries?

[hkp]

I want to be able to use a set of countries for some specific rules.  Is there any way to create a group with countries?

[kprakash · Accepted solution]

We dont have a feature of creating a group of countries and adding this group to a security policy. The closest that we can come to is to create a region, and include a bigger range of latitudes and longitudes, so that it covers as much countries as possible, and use this region under the policy. Otherwise you have to add the countries individually.

BR,

Karthik RP

[kprakash]

Or what you can do is select the countries you want to allow and then check on the negate box. What this will do is all the countries in the list will not be blocked, and the rest will be.

BR,

Karthik

[hkp]

Thanks for the response.

Do you know if a feature like this in being worked on?

-Heath

[mbutt]

Following feature request has been filed on this

FR ID: 1284.Multiple Countries in a Single Object

You can request your local SE so he can also add you to this list.

Hope this helps.

Thanks

Numan

[LunaviSteve]

It is now 2021 and this is still not a feature on Palo Alto. I think it would be helpful for administration of the firewall security policy to be able to group countries in a single object so that it can be easily used in multiple rules.

[anon4all]

i agree that this feature is far too long in the waiting. fortinet can do it. im doing it now!

[John.Gamrat]

Agreed at the very least we can use groups for continents. I think it's reasonable not to either have a NEQ rule denying all countries other than specified or to manually add 250+ countries.

[miguelMA]

When is the feature coming? 

[joel.p]

Also looking for this feature

[StephenMcMahon]

hello from 2024 -- would still be a nice feature 11 years onward

[danielbrelurut]

we are still waiting fo this feature the eu region doesnt work so i have to add all  europe countries ...11 years