Contents

Related Topics

Configure Geolocation

The Geolocation subscription service uses a database of IP addresses and countries to identify the geographic location of connections through the Firebox.

To use Geolocation, the Firebox must use Fireware v11.12 or higher and must have a feature key that enables the RED subscription service. For more information, see:

When you enable Geolocation or change the countries to block, the Firebox blocks new incoming and outgoing connections to or from sites located in the countries you choose to block. The Geolocation settings apply only to new connections. If you block connections to a country, the Firebox does not drop existing connections to that country.

If your internal network or FireCluster configuration uses IP addresses outside the reserved private IP address ranges defined in RFC 1918, RFC 5737, or RFC 3330, look up the geolocation of the IP addresses you use before you block a country. To look up the geolocation of an IP address, from Fireware Web UI select Dashboard > Geolocation > Lookup. For more information, see Geolocation Dashboard.

Before you configure Geolocation to block a particular region, make sure to evaluate the geographic location of sites that users and servers on your network must connect to. A site that is located in one country may include content that is hosted elsewhere.

Edit Geolocation Settings

In the Geolocation settings you can select the countries to block, and configure exceptions for sites you never want to block.

To select the countries to block, in Fireware Web UI or Policy Manager:

  1. Select Subscription Services > Geolocation.
  2. Select the Enable Geolocation check box.
  3. Select countries to block on a map or from a list, as described in the next section.
  4. If there are sites you want to allow in the blocked countries, configure exceptions as described in the next section.
  5. Save the configuration.

Select Countries to Block on a Map

On the Map tab, the currently blocked countries are shown in red. You can unlock the map to change the countries to block on the map.

To use the map to select countries to block, from Fireware Web UI:Closed
  1. Select the Map tab.
    A world map appears. Blocked countries are colored red.
  2. Click Edit to unlock the map.
    The Edit button label changes to Lock.

Screen shot of the Geolocation Blocking Map tab in Fireware Web UI

  1. To interact with the map you can:
    • Use the mouse scroll wheel to zoom the map in and out
    • Click and drag the map to reposition it within the window
    • Move the mouse cursor over a country to see the country name
  2. To block or unblock connections to or from a country, click the country on the map..
    The country color changes to indicate whether connections to and from that country are blocked.
  3. To lock the map, click Lock.
  4. To save your changes, click Save below the map.
To use the map to select countries to block, from Policy Manager:Closed
  1. Select the Map tab.
    A world map appears. Blocked countries are colored red.
  2. Click the Lock icon to unlock the map.

  1. To interact with the map you can:
    • Use the mouse scroll wheel to zoom the map in and out
    • Click and drag the map to reposition it within the window
    • Move the mouse cursor over a country to see the country name
  2. To block or unblock connections to or from a country, click the country on the map.
    The country color changes to Red to indicate connections to and from that country are blocked.
  3. To lock the map, click the Lock icon.

Select Countries to Block from a List

On the Country List tab, you can see the list of all countries, listed by continent. You can select individual countries and you can select all countries on a continent all at once.

To select countries to block from a list, from Fireware Web UIClosed
  1. Select the Country List tab.
    a list of countries appears, separated into sections by continent.

Screen shot of the Geolocation page, Country List tab

  1. Select the countries you want to block based on geographic location.
  2. To select an individual country, click the adjacent text box
  3. To see or hide the list of countries for a continent, click the continent name
  4. To select all countries in a continent, click Select All in the continent section header
  5. To clear the check boxes for all countries in a continent, click Clear All in the continent section header
  6. Click Save.
To select countries to block from a list, from Policy ManagerClosed
  1. Select the Country List tab.
    a list of countries appears, separated into sections by continent.

Screen shot of the Geolocation dialog box, Country List tab

  1. Select the countries you want to block based on geographic location.
  2. To select an individual country, click the adjacent text box
  3. To see or hide the list of countries for a continent, click the continent section header
  4. To select all countries in a continent, click Select All in the country list for that continent
  5. To clear the check boxes for all countries in a continent, click Clear All in the country list for that continent
  6. Click OK.

Give Us Feedback  •   Get Support  •   All Product Documentation  •   Technical Search

© 2018 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard logo, WatchGuard Dimension, Firebox, Core, Fireware, and LiveSecurity are registered trademarks or trademarks of WatchGuard Technologies in the United States and/or other countries.