3

We want to reduce the number of phishing sites that our users can get to. Would it be useful or more problematic to block outbound connections by geo IP? We already block many inbound connections by country. I know it won't block all phishing sites.

3

I worked in a company that considered this. Here's the problem: if any of your employees have any legitimate need to access sites from those countries; news from home, travel to those countries, etc, then you block that legitimate access, too.

If you look at the "usual suspects" and name Russia and China as common phishing site hosting locations, then by making a corporate decision to block any internet traffic to those countries, you set up a prejudicial environment in your workplace at a corporate level about the people from those countries. Please consult your HR department before considering implementing this.

There are lots of other ways to block phishing sites and if you consider the human effects, those other ways tend to have less tangential impact.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.