Protection
...
Policy configuration
GeoBlocking
4 min
navigate to the sidebar menu docid 5vkvzyeveco0n cz4p54q > docid\ ytrytsh3od3lc 34gvaz1 , open a standard policy , and select the geoblocking tab in the top navigation bar overview the geoblocking module allows you to block access to websites and services based on the geographic location of the server hosting them by analyzing the ip address of the destination server, the system determines its physical country if that country is on your block list, the connection is instantly stopped at the dns level why use geoblocking? security reduce your "attack surface" by blocking connections to countries known for high rates of cybercrime or where you have no business interests compliance enforce embargoes or corporate policies regarding data traffic to specific regions interface overview the dashboard is organized to let you drill down from broad continents to specific countries left sidebar lists the geographic regions (e g , africa , europe , satellite provider ) main panel displays the individual nations within the selected region, each accompanied by its national flag for quick recognition understanding the modules countries are grouped by continent or macro region to simplify management use this table to understand the available grouping logic category / region focus & description major continents includes the primary global landmasses africa , south america , north america , antarctica , asia , europe , and oceania strategic sub regions allows for targeting specific geopolitical areas without blocking an entire continent includes the baltic states , middle east, north africa , and caucasus satellite provider blocks traffic routed through satellite internet providers (e g , starlink, inmarsat), which often bypass traditional geolocation checks and mask the true origin of the user ip unspecified catches traffic where the destination ip address does not have a clear geographic assignment in the global registry, often a sign of anonymized or suspicious infrastructure configuration & logic toggle on ( blue blue ) traffic to this country is blocked toggle off ( grey grey ) traffic to this country is allowed enable all / disable all located at the bottom right of the panel checking this box instantly blocks all countries in the currently selected region unchecking it disables the global block, allowing you to select individual nations be very careful when blocking major regions like north america or europe modern websites use cdns (content delivery networks) like aws, cloudflare, or google cloud a website for a local italian business might actually be hosted on a server in the united states or ireland risk if you block the us, you might accidentally block legitimate services (like gmail, microsoft 365, or parts of legitimate websites) that rely on us based servers recommendation only block countries where you are certain you will never need to connect (e g , high risk nations) and monitor your exceptions list if legitimate sites get blocked