Goeip Exclusion list won't apply on fw base access rule with custom country list

sfournier · October 1

I have a fw access rule with GEOIP filter enable with custom country list instead of using global country lis which is to wide.

I won't allow US on incoming connection, but I want to allow one IP in US.

I created the object and added it to GEOIP, exclusion list.

Still, FW blocks it.

If I add US to my custom list, user can connect.

But adding US to my custom list is ti wide open.

Any idea why it won't take note of the exclusion IP?

TKWITS · October 1

Custom GEO lists in Access Rules do not allow for exclusions and take precedence over the global settings.

So either you use the global settings only, or allow US in the Access Rule GEO list.

sfournier · October 1

So as I get it, it is a normal behaviour.

Tanks for the quick feedback!!

Best Answer