Cato EmployeeHi ilya,
This is an interesting point.
Would you share the reason to whitlelist the domain from geoblock IPS?
Are you whitelisting the access of the domain (microsoft[dot]com) for certain/selected countries?
Thank you and Happy Holidays.
The reason is because the alternative would be to create subnet lists for every CIDR block that Microsoft has because they don't separate their CIDR blocks by country. The IP Ranges would just keep growing with every CIDR block discovered (see my screenshot list of IP Ranges below). Is there a better way to do this since geoblock requires specific IP addresses/IP address ranges?
Cato EmployeeHi ilya,
I see.
Do you mean you want to only allow/whitelist Microsoft IP address from India?
And block/blacklist Microsoft traffic to/from other countries/regions, such as US, Europe, Asia?
Thank you
No, I mean Cato has no way to whitelist domains for geo_restriction blocks and there doesn't seem to be an easy way to allow that for companies with large global infrastructures like Microsoft.
