How to Configure a Security Policy to Use a Region

Overview

This document describes how to create a security policy to use a region instead of using an IP address. This can be done in both source address and destination address fields. Traffic can be blocked or allowed based on the region's name mentioned on the security policy.

Steps

Create a policy and add the source or destination address to the policy.

1. Navigate to Policies > Security.
2. Click Add to bring up the Security Policy Rule dialog.
3. Under the Source (or Destination) tab, add the address by clicking Add and click regions to select a country.
   
4. Select either pre-defined region or custom region, as shown below
   • Pre-defined region
     Select a region. After selecting a region, additional IP addresses can be added by clicking on Add.
     
     
     
   • Custom region
     Enter a Name and click "Add" to add IP addresses, as desired. The following screenshot shows the region name as "ABC" and the associated IP address as 10.50.240.63:
     
     The custom region appears under the "Address" area. In this example, the region was configured for the Source section of the security policy:
     

owner: sbabu