How to Create a Geo-Filtering Policy
The Geo Filtering feature is a powerful tool designed to enhance the security and protection of your network infrastructure. Geo Filtering enables organizations to control access to their network by restricting or allowing traffic originating from specific geographical locations, ensuring security and peace of mind.
To Create a Geo-Filtering policy, follow the below steps:
Navigate to Geo-Filtering
Navigation: Policy > Geo-Filtering
Configure Your Policies
To begin blocking or allowing access to content based on geolocation, navigate to the body of the Geo-Filtering Security Module shown above.
Once here, search for the specific country in which you would like to block or allow access to.
For each country you will be making two block or allow decisions for each country, one "Outbound" (Traffic coming from your network to the Country) and the second "Inbound" (Traffic Coming from the Country to your network).
Example:
Let's assume you would like traffic from your network to go to Afghanistan but would not like your network to receive traffic from Afghanistan.
You would do this simply by selecting the Green Check = Allow for Afghanistan under "Outbound" and the Red Minus = Block for Afghanistan Under "Inbound"
After these two block and allow decisions have been decided for each Country in your policy change, you can now proceed to Step 3.
If you are not sure which Countries you would like to block with Geo-Filtering, please consider the following:
AT&T Recommended Geo-Filtering Policy:
By default, AT&T Dynamic Defense recommends blocking access from high-risk countries known for hosting malicious activities and cyber threats. This proactive measure helps safeguard your systems and sensitive traffic by minimizing exposure to potential cyber attacks originating from those geographical locations.
By selecting to utilize the AT&T Recommended policy for Geo Filtering, traffic will be blocked to and from your network for the following countries:
- Belarus
- Congo DRC
- Cuba
- Iran
- Iraq
- Ivory Coast
- Liberia
- Myanmar
- North Korea
- Syria
- Zimbabwe
The AT&T Recommended Policy can be turned on in the Dynamic Defense Portal's Geo Filtering page by clicking the down arrow on the right-hand side of the page.
