Geo-IP Filter

The Geo-IP Filter feature allows you to block connections to or from a geographic location. This is available under Policy | Security Services.The network security appliance uses the IP address to determine the connection's location. The feature also allows you to create custom country lists that affect the identification of an IP address. It also allows you to create a custom message when you block a website.

You can also use the Geo-IP Filter > Diagnostics tool to show resolved locations, monitor Geo-IP cache and custom country statistics, and look up GEO-IP servers.

Blocking by Anonymous Proxy and unknown countries is a good default for your base configuration, but you should consider blocking specific countries. On the countries tab, you can move a country between an Allowed Countries list and a Blocked Countries list. For more information refer to SonicOS 8 Security Services Administration Guide.