TZ 600 When are Geo-IP Blocked Countries connections Blocked
I reviewing logs that show almost every action taken by the TZ 600. What I see is that a connection from a blocked country is Accepted then Dropped in two separately logged items. When I do a search for an IP address I know should be blocked, there are two entries for every attempt.
Is this correct?
Does the firewall have to accept the connection on the WAN side before it can determine if it should be blocked?