Using
geoip locationobject in Firewall provides a robust, flexible, and cost-effective method to control network traffic based on geographic information, enhancing security, compliance, and performance.This feature is available on Artica v4.50 Service pack 1 or Artica v4.50 Hotfix 20241110-21
¶ Activate the Maxmind GeoIP feature inside Artica
For this rule to be available, you must have activated MaxMind's location database update function.
Maxmind produces both free and commercial databases.
Of course, commercial databases are more accurate and updated more regularly.
¶ Create a deny rule using Maxmind GeoIP
- On your Firewall, create a new rule with the Drop action
- Click on the “
Inbound object” tab
- Click on new object button.
- Give a name of your object.
- Select “
GeoIP location” in the drop-down list and click on Add button
- A new object with 0 items is added on your Firewall inbound objects.
- Click on it in order to choosethe denied countries.
- Use the “Select all” or “Deactivate all” button to massively update records
- Then select the regions to be excluded by your firewall rule
