Permit only North American network blocks

Thanks hoolio. i updated the GeoIP database per the instructions here:

http://support.f5.com/kb/en-us/solu...11176.html

and saved your iRule above. One question that came up was if the F5 can suppout privlidge escalation. We may have a case where someone from work may travel abroad and want access even if this is in place. Would this be possible? Also am curious as to how GeoIP works with multinational companies. If the company uses part of its IP block in different countries, then will GeoIP be able to tell where they are from?

Thanks,

Philippe