With recent cyber intrusions perpetrated by the Syrian Electronic Army, it is a good time to be talking about using your firewall to block countries that have no reason to have any access to your network.
Hilltop recommends Dell Sonicwall firewalls to our clients. One of the reasons we recommend Sonicwall, is their Comprehensive Gateway Security Services. CGSS allows us to block countries based on the range of IP addresses that are used.
If our clients do not have remote users accessing the network from these countries, there is no reason to allow IP addresses from these countries to attempt connections via VPN or other protocols. We never recommend that clients host their own websites, so blocking these countries does not prevent people from these countries from browsing websites.