topic Re: PIX 515 Blocking non-US IPs in Network Security https://community.cisco.com/t5/network-security/pix-515-blocking-non-us-ips/m-p/951134#M937712 <HTML><HEAD></HEAD><BODY><P>Is this from the inside going outside? or outside coming in?</P><P></P><P>Either way - it would be an exercise in futility.</P><P></P><P>You bascially talking about blocking 80% of the routable terresteral internet IP space.</P><P></P><P></P></BODY></HTML> Thu, 15 May 2008 08:02:00 GMT andrew.prince 2008-05-15T08:02:00Z PIX 515 Blocking non-US IPs https://community.cisco.com/t5/network-security/pix-515-blocking-non-us-ips/m-p/951133#M937711 <P>Is there a way to block all IPs from outside the US on a PIX 515e version 7.1(1)?</P> Mon, 11 Mar 2019 12:45:16 GMT https://community.cisco.com/t5/network-security/pix-515-blocking-non-us-ips/m-p/951133#M937711 gecko2207 2019-03-11T12:45:16Z Re: PIX 515 Blocking non-US IPs https://community.cisco.com/t5/network-security/pix-515-blocking-non-us-ips/m-p/951134#M937712 <HTML><HEAD></HEAD><BODY><P>Is this from the inside going outside? or outside coming in?</P><P></P><P>Either way - it would be an exercise in futility.</P><P></P><P>You bascially talking about blocking 80% of the routable terresteral internet IP space.</P><P></P><P></P></BODY></HTML> Thu, 15 May 2008 08:02:00 GMT https://community.cisco.com/t5/network-security/pix-515-blocking-non-us-ips/m-p/951134#M937712 andrew.prince 2008-05-15T08:02:00Z Re: PIX 515 Blocking non-US IPs https://community.cisco.com/t5/network-security/pix-515-blocking-non-us-ips/m-p/951135#M937713 <HTML><HEAD></HEAD><BODY><P>This would be outside coming in. I know that there is a ton of IP space to block, I could do it with a bunch of access lists using class A or B subnets assigned to RIPE, APNIC,LACNIC, and AfriNIC but I was wondering if there was some easier way?</P><P></P><P>Thanks,</P><P>Brandon</P></BODY></HTML> Thu, 15 May 2008 14:16:56 GMT https://community.cisco.com/t5/network-security/pix-515-blocking-non-us-ips/m-p/951135#M937713 gecko2207 2008-05-15T14:16:56Z Re: PIX 515 Blocking non-US IPs https://community.cisco.com/t5/network-security/pix-515-blocking-non-us-ips/m-p/951136#M937714 <HTML><HEAD></HEAD><BODY><P>Of course there is an easier way - just allow the subnets you want to come in, then the default deny all is applied!</P></BODY></HTML> Thu, 15 May 2008 14:21:41 GMT https://community.cisco.com/t5/network-security/pix-515-blocking-non-us-ips/m-p/951136#M937714 andrew.prince 2008-05-15T14:21:41Z