Geo Firewall exclusion of traffic from blocking

This article applies to the following products:

Geo Firewall

The following are the options to prevent network traffic from being blocked by Geo Firewall.

1. Uncheck the territory to which the IP belongs. This will allow traffic to and from all IPs from that territory.

On the Geo Rules tab of the main window, uncheck the territory.

2. Add an IP (or IP range) to the User-Defined Network list and keep it unchecked. This allows traffic to and from a known subnet.

Navigate to the menu Tools->User-Defined Networks. Then, expand the User-Defined Networks node on the Geo Rules tab of the main window and make sure the IP (or IP range) is unchecked.

3. Add an IP (or IP range) to the whitelist. The whitelist guarantees that access to and from that IP (or IP range) will be allowed, regardless of other settings.

Navigate to the menu Tools->Settings->Whitelisted IPs. Add the IP address to the list, then click OK.

4. Add a Port Exception for a port to be open for incoming traffic. This opens only a specific port (or ports) for incoming traffic from specific territories.

Navigate to the Port Exceptions tab of the main window.
At the bottom-left, click New. For TCP Ports (local) and/or UDP Ports (local), add the port (or port range) for incoming traffic.
In the Geo Bindings map, select (check) the territory from which the port should be open for access. The access from other (unchecked) territories will remain unchanged, according to the checks in the Geo Rules tab.

5. Allow all incoming and/or outgoing traffic by disabling the blocking action in the Settings. This disables incoming and/or outgoing blocking for all checked territories.

Navigate to the menu Tools->Settings, and select the Geo Rules tab. Uncheck either Incoming traffic blocking action and/or Outgoing traffic blocking action.

Last updated: Oct 16, 2025.