ÝÇíÑææá ÝæÑÊí ÌíÊ FortiGate Firewall Ýí Èí Çä VPN ÓãÇÍ / ÍÙÑ ÇáÏæá Geo IP
fortigate vpn country block - Restrict VPN access to certain countries
Geo-Lock VPN traffic - restrict SSL tunnel - VPN connections to limited countries
Block external ip's from reaching VPN ports - SSL VPN and Geo IP addresses



-------------------------------------------------------
ÎØæÉ ÑÞã 1 Ýì ÇäÔÇÁ ÇáÏæá áÇÓÊÎÏÇãåÇ Ýì VPN
-------------------------------------------------------

Þã ÈÚãá Addresses ÌÏíÏ æÇÎÊÑ ÇáÏæáÉ ÇáÊì ÊÑíÏåÇ æÇÚãá ÍÝÙ

" ãÑÍáÉ ÇáÓãÇÍ Çæ ÇáÍÙÑ áãÇ ÊÇÊì ÈÚÏ, ÇäÊ ÇáÇä ÊÚãá ÚäæÇä ÏáÉ ÝÞØ "



Go to [Policy & Objects].[Objects].[Addresses] in the GUI
Create a new address with the type Geography and select the required Country.
Save the Address

ÔÇåÏ :
ÝÇíÑææá ÝæÑÊí ÌíÊ FortiGate Firewall ÍÙÑ ÇáÏæá How To block specific Country


-------------------------------------------------------
ÎØæÉ ÑÞã 2 ÈÚÏ ÇäÔÇÁ ÇáÏæá íÊã Úãá Restrict Access Ýì SSL-VPN Settings
-------------------------------------------------------



íÊã ÇáÐåÇÈ Çáì SSL-VPN Settings Ëã Restrict Access Ëã ÊÝÚíá Limit access to specific hosts
æãä Hosts åíÊã ÇÎÊíÇÑ ÇáÏæáÉ ÇáÊì Êã ÇäÔÇÁåÇ ãÓÈÞÇ æÇáÊì åíÊã ÇáÓãÇÍ áåÇ ÝÞØ

Then proceed to [VPN].[SSL].[Settings] in the GUI

Under connection settings select the radio button {Limit access to specific hosts} and select the address you created above. You can select multiple addresses in this list. Alternatively you can create an address group and reference that group in the SSL VPN settings.

ãáÍæÙÉ :

ÈÚÏ ÊÍÏíÏ ÇáÏæáÉ æãÍÇæáÉ ÇáÏÎæá Úáì vpn ÇäÊÙÑ ÞáíáÇ ÍÊì íÝÚá ÊÍÏíÏ ÇáÏæá Úáì ÇáÝÇíÑææá ÎáÇá ÏÞíÞÊíä ÝÞØ

ÇáãÑÌÚ:
https://forum.fortinet.com/tm.aspx?m=136899
https://kb.fortinet.com/kb/documentL...rnalID=FD45208
https://forum.fortinet.com/tm.aspx?m=148776
https://forum.fortinet.com/tm.aspx?m=169953