Unless you are 100% sure the
client must only have access to sites and servers in the US or Canada, we suggest that you
change to " Rule: Block known bad countries" which is a list that we keep updated.
You can also set the rule to Rule: Block from specific countries and manually add the countries that the majority of bad actor traffic originates from. Here is a great list to begin with:
- Algeria, Bangladesh, Belarus, Brazil, Bulgaria, Burkina Faso, Burundi, Cameroon, Central African Republic, Chad, China, Estonia, Hungary, India, Indonesia, Iran, Jamaica, Latvia, Lebanon, Lithuania, Myanmar, Nepal, Nigeria, North Korea, Pakistan, Philippines, Romania, Russia, Saudi Arabia, Syria, Taiwan, Thailand, Turkey, Ukraine, Uruguay, Viet Nam
Least Privilege
You can also use the least privilege technique and identify the nations where most services are routed. This is the set that should be sufficient to accommodate almost all of the websites we've encountered.- "Rule: Accept traffic from specific countries"
- US, Canada, Mexico, Australia, Ireland, UK,
France, Italy, Austria, Sweden.
We can adjust the above lists if you are not able to access a site or a service.