SONICWALL TZ400 - BLOCK LOGIN BY GEO LOCATION IP

Lucsolivers

Hi, This is my first post in the community, I apologize if I make any mistakes.

Well, I have a ftz400 in my structure and I've been observing some IP's login denied alerts from different regions like India, China and so on.

What is the best way to block this type of login attempt? do I have to block all connections coming from these geographic locations?

I appreciate any help

Saravanan

Hi @LUCSOLIVERS,

Thank you for visiting SonicWall Community.

We are glad to have you on Community and we are delighted to provide you the best Support.

According to you post, I can understand that you are looking for a better way to utilize the Geo-IP feature. There are two mechanism which we can use to block the irrelevant/unwanted/unnecessary connections from different locations. Please refer below KB article for the same.

To pick one suitable KB among these, we should always go with the best that suits our need. I would recommend block all connections and allow only specific IP's if needed.

https://www.sonicwall.com/support/knowledge-base/using-geo-ip-filtering-to-block-connections-coming-to-or-from-a-geographic-location/170505489180807/

https://www.sonicwall.com/support/knowledge-base/how-can-i-configure-sonicwall-geo-ip-filter-using-firewall-access-rules/170505480197552/

Please go through these KB's and update here for any questions and we can serve you better.