#Configuration Guide# How to Configure Basic GeoLocation
  

RegiBoy Lv4Posted 07 Oct 2022 10:07

How to Configure Basic GeoLocation Filtering

*Product: NGAF
*Version:8.0.47

*1. Introduction

1.1 Scenario

A user has an external website and only needs to provide services for a specific IP address of a country (Philippines) and no other overseas users. The simple topology is as follows:

43093633f8881d1f3d.png

                              
1.2 Requirements
1. The user's network has NGAF device.
2. Servers can be access externally by default


*2. Configuration Guide

2.1 NGAF Configuration

Step 1. Definea business object.
Goto Object > Network Object interface adds IP Address,as shown below:

86543633f88bfa7b76.png


Step 2. Configure the GeoLocationBlocking.
Go to Policies > Access Control> GeoLocation Blocking, theconfiguration is as shown in the figure:

9505633f88d418d6b.png


Step 3. Verifythe validity of the policy. Use the IP address in Philippines to request access to the business system, the expectedresult is normal access.


Step4. Verify the validity of the policy. Use the Overseas IP address to request accessto the business system, the expected result is that it cannot be accessed.

13393633f88f281d4f.png


Step5. Verify the validity of the policy:
Checkthe logs of the NGAF to confirm that there are log data that has been blockedfrom GeoLocation Blocking. Go to Policies> Access Control > GeoLocation Blocking > Blocked IP Addresses to check thelogs.The screenshot is as follows:

55880633f89306ce94.png


3. Precaution
1. If you need to know which country/region an IP belongs to in advance, you can go through
GeoLocation Blocking > Location Lookup to find out after querying.

2. The Location Lookup is fuzzy search. if the IP address is not in the database, then will match the nearest country/region.

Like this topic? Like it or reward the author.

Creating a topic earns you 5 coins. A featured or excellent topic earns you more coins. What is Coin?

Enter your mobile phone number and company name for better service. Go

Faisal P Lv8Posted 07 Oct 2022 10:08
  
Thank you very much for the information ...
Faisal P Lv8Posted 07 Oct 2022 10:09
  
Nice article ...
Faisal P Lv8Posted 07 Oct 2022 10:09
  
Great info …
Newbie517762 Lv3Posted 07 Oct 2022 10:10
  
Thanks for your sharing !
Faisal P Lv8Posted 07 Oct 2022 10:10
  
Very informative …
Faisal P Lv8Posted 07 Oct 2022 10:10
  
Nice guidance ...
Newbie308427 Lv4Posted 08 Oct 2022 11:11
  
nice and easy
Pat Lv3Posted 11 Oct 2022 08:30
  
nice and the author looks good
Detz Lv2Posted 11 Oct 2022 08:31
  
Great Article, and readers friendly