Geoblocking

The APM Geoblocking feature allows the user to block traffic from many IP addresses that are currently known to belong to networks in other regions or countries.

Firewall policy must have a Geo Group defined as source or as destination object.

Geo group details can be seen in the Geoblocking tab by selecting appropriate group:

Once selected, the list and the map will populate the countries/regions defined in the group.

Users can remove and add countries and regions on the list, and the map will reflect the updated selection. Once ready, the user can Submit a change:

After the Submit a Change button is selected, the user will be taken to the Geoblocking Request ticket page. The user will enter the required details and review the Request section, which lists all the changes made on the previous screen. If needed, the user can still add any country from a dropdown list and/or remove it by clicking on Trash bin icon: