Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About DrewC86
DrewC86
Just browsing
Member since Apr 11, 2024
Apr 26 2024
Community Record
4
Posts
0
Kudos
0
Solutions
Apr 11 2024
7:26 PM
Sorry, the rule in question is to block traffic NOT from the listed countries. Most of our clients have no reason to go to any sites outside of the countries in the rule, so we like to have things as locked down as possible (I have cleaned up after a prior IT person who didn't harden the company's network, and their main file server got infected with ransomware).
... View more
Apr 11 2024
7:22 PM
Thanks. We are in the US and all traffic appears to be affected. Most of our clients have no reason to go to any sites outside the countries in the rule, so we like to have things as locked down as possible. Looks like that is becoming less and less viable as more software providers and sites set up servers all over the planet.
... View more
Apr 11 2024
1:29 PM
Thanks for the quick reply. Yeah we already had to do that. We put in another rule only blocking the countries notorious for bad sites/actors (Russia, Brazil, Nigeria, etc) and aren't having an issue, so its probably a random country Cloudflare routes through being blocked somewhere that they haven't figured out yet.
... View more
Apr 11 2024
1:22 PM
We have an issue where when we enable A layer 7 firewall rule blocking traffic from all but a handful of countries (see image) there is a very long load time for websites, as if DNS resolution is being impacted somehow (we use 1.1.1.1/1.0.0.1). When we remove the firewall rule the issue goes away. We have other client locations with the same rule and CloudFlare DNS. Has anyone else encountered this? Edit: We have an MX75 running MX 18.107.2 firmware. Our other locations have MX64s, could that have something to do with it?
... View more
Labels:
- Labels:
-
Firewall
© 2025 Cisco Systems, Inc.
