- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
From MX105 is it possible to block INBOUND traffic by country?
We're getting brute force attacks to our public resources protected by our MX105. I would like to limit the attacks by blocking attempts originating from certain. Is it possible to implement country-level blocks for in-bound traffic while allowing our staff to access these countries for out-bound traffic?
Solved! Go to solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No, Geo-Blocking applies to both directions. No way to only apply it inbound to my knowledge.
https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No, Geo-Blocking applies to both directions. No way to only apply it inbound to my knowledge.
https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If the public resources are websites, consider using a WAF like CloudFlare.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Further to PhiIip's suggestion, maybe talk to your ISP about getting that kind of traffic blocked at their end, before it also consumes your WAN bandwidth? Depends how transient it is, I guess