Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Create and Manage GeoIP Feeds

Create GeoIP Feeds

Before You Begin

  • You must have Juniper ATP Cloud account. Make sure you configure the necessary steps for Juniper ATP Cloud before creating a GeoIP feed. See Juniper Advanced Threat Prevention Cloud Installation Overview for more details.

  • GeoIP filtering is a useful tool when you are experiencing certain types of attacks, such as DDoS from specific geographical locations.

  • If you are using Juniper ATP Cloud, you must select your GeoIP feed as the source or destination of a security policy rule to apply it.

  1. Select Shared Services > Objects > GeoIP.

    The GeoIP page appears.

  2. Click the plus icon (Blue plus symbol suggesting an action like adding or expanding content.).

    The Create GeoIP page appears.

  3. Complete the configuration according to the following guidelines:
    Table 1: Fields on the Create GeoIP Page

    Field

    Description

    Name

    Enter a unique name containing maximum 63 characters without spaces. The name must begin with an alphanumeric character and can contain special characters such as colons, periods, dashes, and underscores.

    Description

    Enter a description that contains alphanumeric characters and special characters (excluding ampersand, lesser than (<) and greater than (>), and newline ()). The maximum length is 900 characters.

    Countries

    Select the check box beside the countries in the Available list and click the >icon to move to the Selected list. The countries in the Selected list are included in the feed to take action according to their threat level. You can use the search at the top of each column to search for the listed countries.

  4. Click OK to save the changes. If you want to discard your changes, click Cancel instead.

    A new GeoIP feed is created and listed as a dynamic address group entry on the Shared Services > Objects > Addresses page. You can use this GeoIP feed as address group to specify the source or destination address while creating security policy rules.

Manage GeoIP Feeds

  • Edit—Select the feed, and then click the pencil icon (Blue pencil icon indicating edit functionality.). When you edit a feed that is a deployed as part of a security policy, you must redeploy that policy for the changes to take effect.

  • Clone—Select the feed, and then click More > Clone.

  • Delete—Select the feed, and then click the trash can icon (Blue trash can icon representing delete or remove function.). You can delete only those feeds that are not referenced in any policy.

See Also