Forum Discussion

PrakashRIndia's avatar
PrakashRIndia
Comet
8 days ago

Restricting traffic to PoP based out of the country

One peculiar thing I am noticing that traffic goes to outside country when there is 2 POP location based out of India. I want to restrict traffic going outside my country boundary as then it raises multiple queries from regulator. 

Is there anyway to restrict or prefer POP of my country only unless user is traveling outside country. I have both site as well as SDP users . One network rule has been created to NAT egress traffic for specific application but what will happen if user is connected to PoP outside India.

  • michaelsaw's avatar
    michaelsaw
    Icon for Cato Employee rankCato Employee
    7 days ago

    Hi PrakashRIndia, 

    For the socket/site, you can set the PoP selection on CMA > Sites.
    Here is the link (Preferred PoP), for reference: https://support.catonetworks.com/hc/en-us/articles/4413265624849-Defining-a-Preferred-PoP-for-a-Site

    For the SDP/ZTNA users travelling out of India, you may consider configuring the network rule for the egress traffic (via India PoP). 
    Here is a link (routing method): https://support.catonetworks.com/hc/en-us/articles/7785698733341-Configuring-Network-Rules

    Hope this helps.
    Thank you! Cheers