Forum Discussion

ilya's avatar
ilya
Icon for Joining the Conversation rankJoining the Conversation
1 year ago

IPS Whitelist GEO_RESTRICTION using domain name

Is there going to be an option in the future to whitelist geoblock IPS using a domain name? Currently only IP addresses affect geo_restriction, so, whitelisting all Microsoft servers in India is a bi...
security
waleed's avatar
waleed
Icon for Cato Professional Services rankCato Professional Services
1 year ago

Ilya, modifying the IPS rule to only apply geo_restriction to inbound traffic does not bypass outbound traffic from IPS. It will simply not block outbound traffic based on the IPS signature of "geo_restriction".  IPS will continue to scan all the traffic inbound and outbound.

ilya's avatar
ilya
Icon for Joining the Conversation rankJoining the Conversation
1 year ago

waleedRight, what I mean is, I still want the geoblock in effect for everything else going to India. Removing outbound for an entire country for one vendor isn't really the solution I was looking for. Cato can just update their product to whitelist a domain for geo_restrictions and we'll just put an RFE in for that. Why would you change such a large IPS behavior (i.e. removing outbound geo_restriction for a country) just for a single vendor choosing to send some of your traffic to India?