Forum Discussion

ukhan20's avatar
ukhan20
Icon for Cirrus rankCirrus
Jan 15, 2025

Geo-fencing for block and allow one country

how to do Geo-fencing in F5 Advanced Firewall Manager (AFM) to allow access from only one country, such as USA , and block all other countries ?
application delivery
security
f51's avatar
f51
Icon for Cumulonimbus rankCumulonimbus
Jan 15, 2025

Hello Khan, 

Please follow below steps to configure geo-fencing in F5 AFM to allow access only from the USA and block all other countries:

  1. Log in to the F5 Configuration Utility.
  2. Navigate to Security > Network Firewall > Policy List.
  3. Create a New Firewall Policy.
  4. Define Rules for the Policy:
    • Create an Accept rule for Source: Geolocation and select United States.
    • Create a Reject/Drop rule for Source: Geolocation and select Not in United States.
  5. Save and Apply the Policy to the relevant virtual servers.