Forum Discussion

Ralf_Schubert_1's avatar
Ralf_Schubert_1
Icon for Nimbostratus rankNimbostratus
Nov 20, 2013

AFM: Block IPs from specific Country

Hi,

 

i was wondering if it is possible to block all connections from IPs belonging to specific countries with AFM? I found some documents, which i understand as this should be possible, but I do not find any manual for this purpose.

 

Does anyone have a link or description for me how this works?

 

Thanks in advance!

 

Ralf

 

AFM
BIG-IP Access Policy Manager (APM)
geolocation
security

1 Reply

  • ltwagnon's avatar
    ltwagnon
    Ret. Employee
    Nov 26, 2013

    Here's some discussion on an iRule solution that might help: https://devcentral.f5.com/questions/geolocation-irule-client_accepted-missing-some-traffic

     

    Also, if you have the ASM provisioned, you can use the Geolocation feature to block IPs from specific countries. Here's an article describing the ASM capabilities: https://devcentral.f5.com/articles/the-big-ip-application-security-manager-part-7-geolocation.UpTC7bHnbIU