Block Incoming Connections from Specific Countries

Table of Contents

Filter

Expand All | Collapse All

Prisma Access Docs

Administration
Version
- Prisma Access China
- 4.0 & Later
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
Integrations
Incidents & Alerts
Release Notes
Version
- 5.2 Preferred and Innovation
- 5.1 Preferred and Innovation
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred

Proxy Support for Prisma Access and Strata Logging Service

Secure Internet Traffic from AWS WorkSpace

Block Incoming Connections from Specific Countries

Use

Prisma Access allows you to create security policy rules to block login attempts for Remote Network, Mobile Users—GlobalProtect, and Mobile Users—Explicit Proxy deployments from countries you specify. Prisma Access blocks incoming connections from the countries you specify based on the geo location information from the source IP address of the client.

To block incoming connections from these countries, complete the following task.

Create a security policy pre rule using one of the specific rule names:
Be sure that you configure this rule as a pre rule.
- To block a country for Mobile Users—GlobalProtect deployments, create a rule named Mobile_User_EMBG_Source_Countries.
- To block a country for Mobile Users—Explicit Proxy deployments, create a rule named Explicit_Proxy_EMBG_Source_Countries.
- To block a country for Remote Network deployments, create a rule named Remote_Network_EMBG_Source_Countries.
Add a Tag for the rule named PA_predefined_embargo_rule.
Add one or more countries to block in the Source.
Specify an Action of Drop.

Proxy Support for Prisma Access and Strata Logging Service

Secure Internet Traffic from AWS WorkSpace

Prisma Access Docs

Block Incoming Connections from Specific Countries

Prisma Access Docs

Block Incoming Connections from Specific Countries

Activation & Onboarding

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner