Options

GeoIP Lookup

Hello,
I'm wondering if anyone in the US has a client or personally has international blocking turned on but also has exceptions for Azure, Google, and AWS services that have IP addresses that show up as international but clearly in a regional datacenter?

Do we know if WG firebox uses their own IP to Country lookup? You just whitelisting all the IP's for these services? Trying to determine best way to handle these large corporations that have regional IP's that ARIN indicates are international.

Running into issues like patching Chrome and other things. Just curious.

Answers

  • Options
    james.carsonjames.carson Moderator, WatchGuard Representative

    Geolocation blocking happens before exceptions for the HTTPS proxies -- most customers that want to block international address generally just allow whatever is trying to update to retry until it finds a server in an allowed region.

    -James Carson
    WatchGuard Customer Support

Sign In to comment.