Forum Discussion
NimbostratusASM Geolocation Blocking Management
I'm deploying ASM to more of my companies sites. When I did ASM training they recommended one profile per site to keep it separated for reporting, etc. What I'm wondering is, is there anyway to tie it to a list of allowed countries? For example, if I have 20 different ASM policies, but I want them to all have the same countries allowed? It becomes a hassle if I have to add a new country to each policy individually.
5 Replies
Vitaliy_SavransNacreous
I think there is no such possibility, because each policy is separate instance.
Mike__Maher_108Currently there is no way to do this that I know of. This sounds like a good suggestion for an RFE thought, it would be nice if you could at create Geo-Location lists and attach them separately to each policy similar to how you can create Attack Signature lists. That way if you had 4 applications that had the same Geo-Location requirements you could manage one list for those 4 applications.
I have also submitted an RFE to be able to create two separate lists in a policy one for countries you want to block and one for countries you want to log all traffic from.
- Nick_T_68319Mike, that would be perfect! Sorta like an ACL for countries.
Mike_MaherCurrently there is no way to do this that I know of. This sounds like a good suggestion for an RFE thought, it would be nice if you could at create Geo-Location lists and attach them separately to each policy similar to how you can create Attack Signature lists. That way if you had 4 applications that had the same Geo-Location requirements you could manage one list for those 4 applications.
I have also submitted an RFE to be able to create two separate lists in a policy one for countries you want to block and one for countries you want to log all traffic from.
- Nick_T_68319Mike, that would be perfect! Sorta like an ACL for countries.
