GEO-IP Blocking

Web Safety appliance can also block connections to specific IP addresses by countries. This module utilizes the IP2Location LITE data source. In order to be able to enforce Geo IP restrictions per policy you first need to configure the API key for the database. To obtain that key, visit this link.

Specify the key in Web Filter / Settings / GeoIP tab as shown on the following screenshot.

GeoIP Settings

Then indicate the country to block in Web Filter / Policy / Rules / Domain and URLs / Geo IP as shown on the following screenshot.

GeoIP Rule

When user tries to access a geoblocked site the following blocked page will be shown.

GeoIP Blocked

Database file for the Geo IP module is stored in /opt/websafety/var/spool/geoip folder and automatically updated periodically.