Control Network Traffic > Geolocation Blocking > Configure Geolocation Blocking Exceptions

Configure Geolocation Exceptions

Some of the features described in this version of Fireware Help are only available to participants in the Fireware v11.12 Beta program. If a feature described in this topic is not available in your version of Fireware, it is a beta-only feature.

The Geolocation subscription service uses a database of IP addresses and countries to identify the geographic location of connections through the Firebox. You can add exceptions to the Geolocation configuration. Geolocation never blocks connections to or from sites on the Exceptions list.

You can add an exception for an IPv4 or IPv6 host IP address, Network IP address, host range, or FQDN.

To add a Geolocation exception in Fireware Web UI or Policy Manager:

  1. Select Subscription Services > Geolocation.
  2. Select the Exceptions tab.
  3. Click Add.
  4. From the Choose Type drop-down list, select the method to identify the exception.
  5. In the adjacent text box, type the IP address, network IP address, host range, host name, or FQDN. If the exception is for a host range, type the start and end IP addresses for the range of IP addresses in the exception.
    For FQDN, you can use a specific domain name, such as, or use a wildcard to indicate the domain and all subdomains, such as *
  6. (Optional) In the Description text box, type a description of the blocked site exception.
  7. Click OK.

To remove a Geolocation exception:

  1. Select Subscription Services > Geolocation.
  2. Select the Exceptions tab.
  3. Select one or more exceptions.
  4. Click Remove.

See Also

About Geolocation

Give Us Feedback     Get Support     All Product Documentation     Technical Search