Forum Discussion

AP's avatar
AP
Icon for Nimbostratus rankNimbostratus
May 12, 2014

ASM IP Geo-location exemption

Hi,   Is it possible to create exemptions to Geo-location configurations?   The use case is fairly obvious and in our case: We're currently blocking all countries outside our own however a requ...
ASM Advanced WAF
geolocation
management
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
May 15, 2014

Hi Andrew, you should be able to creat an IP Address exception for the single IP from the disallowed country. Go to Application Security:IP Addresses: IP Address Exceptions, and click create. Then add the allowed IP address and select the option to "Never block this IP address."

 

Apply the change to the ASM security policy and you should be all set.

 

Requests from that IP address will still be marked as illegal, because they still originate from a disallowed geolocation. But the exception flag will be an error because it is specified as an allowed address.

 

Erik Novak