Scribd
Upload
49 views4 pages

Technical Tip - Blocking Inbound Access From Specif... - Fortinet Community

Uploaded by

Osama Refai
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
49 views4 pages

Technical Tip - Blocking Inbound Access From Specif... - Fortinet Community

Uploaded by

Osama Refai
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

7/19/23, 5:41 PM Technical Tip: Blocking Inbound Access from Specif...

- Fortinet Community

 Help 

Forums  Knowledge Base  Community Groups 

FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors
and threat intelligence security services from FortiGuard labs to deliver top-
rated protection and high performance, including encrypted traffic.

This Board Search here

Fortinet Community  Knowledge Base  FortiGate  Technical Tip: Blocking Inbound Access from Specif...

jhelder
Staff

Created on

‎07-19-2023 05:11 AM

Article Id

264818

Technical Tip: Blocking Inbound Access from Specific Country IP


Ranges on FortiGate
Description This article describes a practical approach to safeguarding the network by
denying connections from IPs originating in China.
However, it is important to note that this method can be applied to block
connections from any country, providing an additional layer of defense against
potential threats. It is possible to effectively block or deny all connection
attempts originating from undesired countries.
Scope FortiGate.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Blocking-Inbound-Access-from-Specific-Country-IP/ta-p/264818 1/4
7/19/23, 5:41 PM Technical Tip: Blocking Inbound Access from Specif... - Fortinet Community

Solution 1. Verify 'Local in Policy' Enablement:

Navigate to 'System' and access 'Feature Visibility'. Confirm whether 'Local in


Policy' is enabled. 

 
2. Proceed to 'Policy and Object' and select 'Addresses'. Choose to create a
new address object to define the IP ranges for the specific country we
wish to block.

 
3. Create the Local-in Policy using the CLI:

Configure the local-in policy by setting the appropriate parameters:


Specify the previously created address object as the source for the policy.
Define the desired interface and services to be affected. For instance, if 'port1'
serves as a WAN interface.
And in the service, it is all defined, because it is necessary to block all
connections coming to the firewall in any port number.
 

 
By following these steps, it is possible to effectively block connections
originating from specific country IP ranges, ensuring enhanced security for the
FortiGate device.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Blocking-Inbound-Access-from-Specific-Country-IP/ta-p/264818 2/4
7/19/23, 5:41 PM Technical Tip: Blocking Inbound Access from Specif... - Fortinet Community

49 1

Share

Submit Article Idea

Contributors

jhelder

Jean-Philippe_P

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to
provide comprehensive cybersecurity protection for all users, devices, and applications and across
all network edges.​

Social Media

SECURITY RESEARCH

Threat Research

FortiGuard Labs

Threat Map

Threat Briefs

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Blocking-Inbound-Access-from-Specific-Country-IP/ta-p/264818 3/4
7/19/23, 5:41 PM Technical Tip: Blocking Inbound Access from Specif... - Fortinet Community

Ransomware

COMPANY

About Us

Security Fabric

Exec. Mgmt

Careers

Certifications

Events

Industry Awards

Social Responsibility

NEWS & ARTICLES

News Releases

News Articles

Trademarks

CONTACT US

Corporate

Community

Copyright 2023 Fortinet, Inc. All Rights Reserved.


Terms of Service Privacy Policy GDPR

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Blocking-Inbound-Access-from-Specific-Country-IP/ta-p/264818 4/4

You might also like