GEO-IP Block only working after a restart

Veronesi
Veronesi Posts: 24  Freshman Member
Friend Collector First Answer First Comment
edited April 2021 in Security
Hi everybody 

I have a VPN100 with latest Firmware.
I use the GEO-IP blocking mechanism a lot and it's working great.

Recently I added an additional country to my GEO-IP Blocking Group.
Then I waited for about 30 minutes, but this country was still not blocked.
After a restart of the firewall, this country was blocked immediately.

Is this a bug?
Does the firewall not recognize the change in the GEO-IP GROUP ?


The #2, #3 and #4 groups are groups with specific countries in it.
The 1st group is the main group and contains the groups #2, #3 and #4 and it's used in all rules.

Anyway, a restart helped, but for the future it might be useful that this rule could be applied without restarting the whole device.

Accepted Solution

All Replies

  • Zyxel_Vic
    Zyxel_Vic Posts: 281  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Hi @Veronesi
    Had you ever connected to sites belong to the blocked country "BEFORE" applying the new group? If it is the case, please note that the new rules won't affect the "already existing sessions". It will block the new created sessions.
  • Veronesi
    Veronesi Posts: 24  Freshman Member
    Friend Collector First Answer First Comment
    Hi @Zyxel_Vic

    No I haven't. These connections were always blocked by the default rule. But I wanted to block them actively  that's the reason why I added them to my block list. 



  • Zyxel_Vic
    Zyxel_Vic Posts: 281  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Hi @Veronesi
    I've seen similar symptom in my lab. We'll check why the behavior working in this way. 

    Thanks for your feedback.
  • Veronesi
    Veronesi Posts: 24  Freshman Member
    Friend Collector First Answer First Comment
    Thank you @Zyxel_Vic
  • Veronesi
    Veronesi Posts: 24  Freshman Member
    Friend Collector First Answer First Comment
    Hi @Zyxel_Stanley
    Thanks a lot!

Security Highlight