vPBX GEO Firewall

Increased security

With today’s accessibility to the internet, the world has become even smaller and we are able to communicate with anyone around the globe. We now have voice over IP connections established through the internet, and that makes our connections to our business and homes more reachable. But sometimes, people from places we do not intend to give access to our means of communication, in this case, our PBX systems, try to connect and use it for their own benefit.

At vPBX we want to make it easier to control who can connect or not to our PBX system. That is why we have created this commercial add-on module called “Geo Firewall”. With the Geo Firewall add-on, you can choose specific countries that can and cannot connect to your PBX system. And we have made it as easy as it gets.

How does it work?

To use the Geo Firewall add-on, you simply select the countries you wish to block access to your PBX, and then click “Save”. It is as simple as that. The add-on will make sure to block any requests incoming from the blocked countries selected, and only allow from those that are allowed.

Important Notes

• If you are using Let’s Encrypt certificates, enabling GEO Firewall might affect the renovation of this kind of certificate.  This is because Let’s Encrypt uses HTTP challenges from random IP addresses, and these IP addresses might be blocked by the GEO Firewall. So, to renovate a Let’s Encrypt certificate with the GEO firewall enabled, you must disable the GEO firewall, go to the Certificates module, select the certificate, and hit the update button to renew the certificate. After renewing the certificate, you may enable again the GEO firewall.
• When using Geo Firewall, applying changes to the Firewall modules might be delayed depending on the number of blocked countries. This is because when the GEO firewall is enabled, the firewall service must load a large number of IP Sets per country. So, be careful when applying changes with the GEO firewall enabled, because you may experience disconnection issues during the firewall reload.