Geographic Protection

Restrict access from other countries

Para permitir el acceso remoto solo desde países específicos, seleccione el botón "Permitir conexiones solo desde esta lista de países" y luego haga clic en el botón "Agregar país".

A popup offering a country list opens. Select the country you wish to add on the list.

You can choose to check the box below to unblock all previously blocked IP addresses for the selected country.

Click on the button “Add Country” to return to the feature main screen.

Important: In order to save your changes, click on the “Apply” button.

In this example, remote access is allowed for users connecting from United States and France.

A confirmation message appears to avoid blocking the connected user. Click “Yes” to confirm and apply the changes.

Restringir el acceso desde Internet

Geographic Protection can be configured to restrict the access to your machine to only private and whitelisted IP addresses I'm ready to assist you with the translation. Please provide the text you would like me to translate.

Désactiver la protection géographique

Standardmäßig ermöglicht der geografische Schutz den Zugriff für Benutzer, die von überall auf der Welt eine Verbindung herstellen.

Desbloqueo de direcciones IP bloqueadas

When an IP address gets blocked, it appears on the Firewall-Registerkarte Blocked IP addresses can then be unblocked and eventually added to the list of allowed IP addresses.

If you get blocked, we recommend that you try connecting from any country you allowed on TSplus Advanced Security, for instance by connecting from another remote server or using a VPN service. You can also use a console session to connect, as this session is not a remote session and will not be blocked by TSplus Advanced Security.

Important:

• Check that you have selected the country where you are currently connected from. Otherwise, your IP address will be blocked quickly after applying the settings, thus disconnecting you without any hope of connecting back again from the same IP address.

• Consider adding your own IP address to the list of allowed Adresses IP um bloqueio por parte da Proteção Geográfica ou Bruteforce Protection características.

Comprendre la protection géographique

Geographic Protection vérifie les connexions réseau TCP entrantes, à la fois IPv4 et IPV6 (sauf lorsque le mode API Windows hérité est configuré).

Prozesse: Geographic Protection listens to connections sent to the TSplus Remote Access’ Web server by default, if installed. The name of the corresponding process is HTML5 Service. If you wish to disable its monitoring or check connections destined to other processes, go to Settings > Advanced > Geographic Protection .

Ports réseau : par défaut, la Protection Géographique écoute les ports par défaut utilisés pour se connecter à distance à un serveur. Ces ports incluent RDP (3389), Telnet (23) et VNC. La Protection Géographique prend en charge les fournisseurs VNC suivants : Tight VNC, Ultra VNC, Tiger VNC et Real VNC, qui ne sont en aucun cas liés à TSplus. Si vous souhaitez désactiver sa surveillance ou vérifier les connexions destinées à d'autres ports, allez à Settings > Advanced > Geographic Protection .

Mecanismos de detección:

Geographic Protection detects inbound connections from unauthorized countries using three different detection mechanisms:

• Windows API
• Event Tracing for Windows
• Pare-feu intégré

On the one hand, Event Tracing for Windows is an efficient kernel-level tracing facility that captures network events in real time. Event Tracing for Windows is recommended with Windows Firewall enabled (default).

D'autre part, l'API Windows fonctionne très bien avec n'importe quelle configuration réseau spécifique, mais peut exercer une pression constante sur le CPU en fonction du nombre de connexions actives. Veuillez noter que l'API Windows n'est pas encore compatible avec IPv6.

Built-In Firewall ermöglicht die Benutzer-Modus-Erfassung und das Fallenlassen von Netzwerkpaketen, die an den Windows-Netzwerk-Stack gesendet werden. Wenn die integrierte Firewall so konfiguriert ist, dass unerwünschte Verbindungen blockiert werden, wird empfohlen, sie zu verwenden, um die erlaubten Länder des Geographic Protection durchzusetzen.

Geolocalización: Advanced Security incluye datos de geolocalización publicados por MaxMind, disponibles en http://www.maxmind.com Si encuentra una dirección IP que no está registrada en su país actual, comuníquese directamente con MaxMind para solucionar el problema.

Dépannage

If you ever notice that Geographic Protection does not block connections coming from a country which is actually not in the authorized countries’ list, it is certainly because:

Antivirus: In order to block an IP address, Geographic Protection adds a blocking rule on the Windows firewall. So, firstly, the firewall must be active. You also have to check if some firewall parameters are not handled by another program, like an antivirus. In this case, you will have to deactivate this program and restart the service “Windows Firewall”. You can also contact your third-party program editor and ask them to find a way for their program to respect the rules when added to the Windows firewall. If you know any software editor’s technical contact, we are ready to develop these “connectors” for the firewall. Contactez-nous .

VPN: In caso il client remoto utilizzi una VPN, la Protezione Geografica otterrà un indirizzo IP scelto dal fornitore della VPN. Come sapete, i fornitori di VPN utilizzano relay in tutto il mondo per consentire ai propri utenti di navigare in modo anonimo. Alcuni fornitori di VPN consentono agli utenti di definire il paese del relay. Pertanto, gli utenti con fornitori di VPN potrebbero essere instradati attraverso un paese non autorizzato. Ad esempio, se un fornitore di VPN sceglie un IP dallo Sri Lanka, questo paese deve essere autorizzato dalla Protezione Geografica. Inoltre, se la VPN utilizza un indirizzo IP aziendale interno, allora la protezione diventa irrilevante.

Firewall / Proxy: The purpose of a hardware firewall is to filter incoming and outgoing connections for large companies. As it is only a filter, it should not modify the originating IP address and therefore should not impact Homeland protection. However, a proxy would definitively change the originating IP address to use a private network address, which will always be allowed by Homeland protection. The primary purpose of this feature is to block access to a server opened to the Internet. If all connections come from the corporate network, then the protection becomes irrelevant.