- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
Using Geo-IP filtering to block connections coming to or from a geographic location
10/14/2021 
396 People found this article helpful
112,705 Views
Description
Geo-IP Filtering allows the administrator to block connections coming to or from a geographic location. Botnet Command & Control Filtering allows the administrator to block communications to suspected command and control IPs based on the reputation database built by the Sonic GRID research network.
A new Security Services | Geo-IP & BOTNET Filter page has been added to the management interface.
For this feature to work correctly, the country database must be downloaded to the appliance. The Status indicator turns yellow if this download fails for any reason. Green status means that the download was successful.
Resolution
Resolution for SonicOS 7.X
This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.
- Login to SonicWall management interface and navigate to POLICY | Security Services | Geo-IP Filter.
- Click Settings , change Block connections to/from countries selected in the Countries tab checkbox to Enable . Below that select All Connections radio button.
- Click Accept at the bottom.
- Click on Countries and move the countries (you want to be blocked) under the Blocked Countries table on the right side.
- The Geo-IP Exclusion Object field allows you to select an Address Object containing IP addresses to exclude from filtering and blocking.
Troubleshooting
You can look up an IP address to find out the location , please click on Diagnostics on top , under Lookup IP enter the IP ,click GO.
NOTE: Geo-IP is supported on TZ, NSA and higher appliances.
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
- Login to SonicWall management interface and navigate to Manage | Security Services | Geo-IP .
- Click Settings , change Block connections to/from countries selected in the Countries tab checkbox to Enable . Below that select All Connections radio button.
- Click Accept at the bottom.
- Click on Countries and move the countries (you want to be blocked) under the Selected country table on the right side , you can simply use drag and drop to move the countries .
- The Geo-IP Exclusion Object field allows you to select an Address Object containing IP addresses to exclude from filtering and blocking.
Troubleshooting
You can look up an IP address to find out the location , please click on Diagnostics on top , under Lookup ip enter the ip ,click GO.
NOTE: Geo-IP is supported on TZ 215/TZ215W,TZ300 and higher appliances.
Related Articles
- Analyzing TCP reset(RST)packets
- ‘Error sending one-time password’ encountered when connecting to NetExtender
- Supported SonicWall and 3rd party SFP and SFP+ modules that can be used with SonicWall NSsp series
Categories
- Firewalls > NSa Series > Geo-IP & Botnet Filter
- Firewalls > TZ Series > Geo-IP & Botnet Filter
- Firewalls > NSv Series > Geo-IP & Botnet Filter
YES
NO