[AF] The blacklist interception objects of global blocking and interception are not fixed
Problem Description
There is an IP Address segment that frequently attacks, and the feedback to add it to the Blacklist is ineffective.
Warning Info

989005be999dd9fd74.png (510.33 KB)
Process——
-
Add IP Address to the blacklist and attack from the external network (screenshots are temporarily using other IPs), as follows:

318585be99a219cc86.png (541.28 KB) -
Check the global blocking configuration. Only one IP Address is added to the configuration, as follows:

922265bec1ac2bcaec.png (64.14 KB)
Root cause
The initiator of the attack is an IP Address with no fixed Network Segment.
solution
Fill in this IP Address segment in the list of released IP Address, as follows:

676435bec1b22e060b.png (65.12 KB)
Original Link
https://support.sangfor.com.cn/cases/list?product_id=13&type=1&category_id=457&isOpen=true