Country Blocking - Configuration, Bad Actors List

Country Blocking - Configuration, Bad Actors List

Setup:

Country Blocking is in your Portal > Firewall > Countries

United States and Canada Only

NOTE: We do not recommend setting Rule: Accept traffic from United States / Canada.
In this configuration your clients will not be able to use services that have data centers in other parts of the world, a prime example is Facebook which routes the majority of their traffic through Ireland. If you spend a bit of time surfing around you will find that a good portion of the sites/services you use are running a portion of their site internationally.

Known Bad Actor Countries

Unless you are 100% sure the client must only have access to sites and servers in the US or Canada, we suggest that you change to " Rule: Block known bad countries" which is a list that we keep updated. 

You can also set the rule to Rule: Block from specific countries and manually add the countries that the majority of bad actor traffic originates from. Here is a great list to begin with:
  1. Algeria, Bangladesh, Belarus, Brazil, Bulgaria, Burkina Faso, Burundi, Cameroon, Central African Republic, Chad, China, Estonia, Hungary, India, Indonesia, Iran, Jamaica, Latvia, Lebanon, Lithuania, Myanmar, Nepal, Nigeria, North Korea, Pakistan, Philippines, Romania, Russia, Saudi Arabia, Syria, Taiwan, Thailand, Turkey, Ukraine, Uruguay, Viet Nam

Least Privilege

You can also use the least privilege technique and identify the nations where most services are routed. This is the set that should be sufficient to accommodate almost all of the websites we've encountered.- "Rule: Accept traffic from specific countries"
  1. US, Canada, Mexico, Australia, Ireland, UK, France, Italy, Austria, Sweden.
We can adjust the above lists if you are not able to access a site or a service.