F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

AP's avatar
AP
Icon for Nimbostratus rankNimbostratus
May 11, 2014

ASM IP Geo-location exemption

Hi,   Is it possible to create exemptions to Geo-location configurations?   The use case is fairly obvious and in our case: We're currently blocking all countries outside our own however a requ...
ASM Advanced WAF
geolocation
management
security
AP's avatar
AP
Icon for Nimbostratus rankNimbostratus
May 15, 2014

Hi Erik,

 

The aim is to implement an IP exception to the geolocation blocking policy only, not to all blocking policies. Setting an exception to "Never block this IP address" is really expanding the potential attack surface from that IP which I'm not keen to do.

 

Thanks for your suggestion though, it seems to be the only option in the list that would actually do what I'm looking for however the cons are too severe in my opinion.

 

Andrew

 

  • wlasagne's avatar
    wlasagne
    Icon for Nimbostratus rankNimbostratus
    Jul 15, 2015
    Hi Andrew. did you find a solution? Gian