For some web applications, you need a separate network firewall policy for users from different geographic locations. You might want to open specific ports for users from one country and block those same ports for users from another country. Using the power of iRules and VIP-targeting-VIP solutions, you can dynamically select an AFM policy based on source IP address geolocation. This Lightboard Lessons discusses the details of it all. Enjoy!