Browse Docs
ONLINE DOCUMENTATION

Network checks in Trust Profile

In this document

Network checks are about where the endpoint connects from, not about the device itself. They are set in the Generic row of a profile and apply to every platform.

Supported platforms: [Generic: Windows, macOS, iOS, Android]

IP Country

Platforms

[Generic: Windows, macOS, iOS, Android]

Comparison

equals, does not equal

Fields

Country codes (required, one or more countries)

Checks the country the endpoint’s connection comes from, as seen by the DefensX network.

  • equals passes when the country is any of the selected countries. Use it as an allow list, for example only from the United States and Canada.

  • does not equal passes when the country is none of the selected countries. Use it as a deny list.

To set it up, open the Generic row of the profile, click Add a check and choose IP Country under Network. Pick the countries from the list. The most frequently used countries, plus the country you are browsing from, are shown at the top. You can type to search, and Clear all removes the selection.

trust profile country checks
Things to know

  • The country comes from the connection, not from the device’s physical location. A device using a VPN, a proxy or a mobile network that exits in another country is judged by that country.

  • Generic checks are required on top of the platform checks. A Windows computer must pass the Windows group and the IP Country check.

  • A group can contain only one IP Country check. Put every country you need in that one check.

  • A connection that the network cannot place in any country fails an equals list and passes a does not equal list. If blocking unplaced connections matters to you, use equals (an allow list).

  • If the agent has not received a country for its connection yet, the check reports an error and the endpoint does not pass.

Tip
 An allow list (equals) is safer than a deny list (does not equal). A new or unplaced country is kept out by an allow list but let through by a deny list.
Secure Industries, Inc 101 Avenue of The Americas, Floor 9 New York, NY 10013