06-10-2021 12:53 PM
We have a Cisco firewall that can be accessed through the web interface called Firepower. I discovered that there is a geolocation rule that blocks visitors from South Africa. The issue is that we recently got a student from there that cannot visit our website through any computer (other than a mobile phone) and I believe it's because of the firewall. I already verified with my ISP that they aren't blocking anything.
I would like to keep the rule, but white list them so they can at least access it. Is there a way to set up the rule-based on a MAC address? this seems to be the simplest way in my mind to have him visit with his own computer.
06-10-2021 04:57 PM
As I know you can use SI in FTD to config white list and use DNS to control this whitelist depend on domain.
06-11-2021 02:06 AM
A MAC address doesn't convey across the Internet unless it's encapsulated in something like a remote access VPN.
You could give them a VPN connection (which is not affected by Geolocation rules).
A much simpler solution is to just have the student use an inexpensive commercial VPN service like Tunnel Bear that allows them to choose their apparent country of origin.
06-11-2021 08:00 AM
I didn't think about this, I could test this with the student and if it works I will probably get the college to buy a handful of licenses for students on rare occasions like this.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide