Forum Discussion

tcf5_326122's avatar
tcf5_326122
Icon for Nimbostratus rankNimbostratus
Jun 25, 2018

Global Geolocation enforcement

Hello, is it possible to apply a "global" Geolocation restriction on the Big-IP? We'd like to restrict traffic to a few geolocations. I understand that this can be done on a "per Virtual Server" basis using various methods like iRules, Local Traffic Policies, ASM. But what I'm looking for is one policy that applies to all Virtual Servers. Any assistance is appreciated.

 

2 Replies

  • Unfortunately this isn't possible outside the methods you noted. You could open a case with F5 support and ask to have this added as feature request though.

  • I'd look at creating a single AFM(Firewall) policy for this, and apply the same policy to all Virtual Servers. That's if you have AFM provisioned/licensed.