Question: On FMC Access Control Rule - Is Source and Destination Networks an OR Operator?

[Lucas Phelps]

I've created a Geolocation list of countries I want to block.   Do I put it in my Access Control list as the destination network, source network, or both?

If I put the geo list in both, does the FMC interpret it as an AND operator?  Meaning the traffic has to be sourced from and destined to the bad countries?   Or is it one or the other?

Thank you!

[mikael.lahtela]

Hi,

The AP rule is "and" rule, so if everything matches in the rule it will use that rule.
If I understand your question correctly if you have blacklist source geo and blacklist destination geo the traffic will block between blacklisted countries, but not if one of them are "white".

br, Micke