Achieve country level blocking while using azure traffic manager and azure application gateway with WAF

Akash Samal 46

We have used azure traffic manager and azure application gateway with a Web application firewall for MVC C# web Application which hosted on the Azure virtual machine.

For security reasons, we need to allow specific IP addresses and block access at the country level. But, We are unable to find a way to block access at the country level and also allow specific IP addresses from that country.

Can you please guide a way/ feasibility to achieve this?
Does it need any other azure service or can be it achieved with existing services/configuration.

Accepted answer

SnehaAgrawal-MSFT 22,171 Reputation points

2020-02-18T06:37:13.727+00:00

Thanks for asking question! You can create Custom rules to suit the exact needs of your applications and security policies and restrict access to your web applications by country/region. To create a geo-filtering custom rule, select Geo-location as the Match Type, and then select the country you want to allow/block from your application.

For more information, see Geomatch custom rules (preview).
Please sign in to rate this answer.

1 person found this answer helpful.
Akash Samal 46 Reputation points

2020-02-19T08:58:48.083+00:00

We can deny access at the country level with this change, but how can we whitelist desired IP addresses within that country.
For Example, I would like to block access from all over India but at the same time allow access from our offices in India.

SnehaAgrawal-MSFT 22,171 Reputation points

2020-02-21T04:47:50.01+00:00

@Akash Samal Thanks for reply! Also, you can add a custom rule to block all traffic from whatever countries you need, and add another custom rule (with higher priority) to allow traffic from specified IP addresses.
For more information see documentation

Akash Samal 46 Reputation points

2020-02-24T06:06:50.63+00:00

In addition to this, can we use any Azure service for providing the user interface for country-level blocking? As we are providing infrastructure to the non-technical team for maintenance.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

1 additional answer

Danejahtt 1 Reputation point

2020-07-19T08:15:14.84+00:00

Hey Good day, How are you guys.

Is the Geo-location working now with AppGW>?

Thanks
Please sign in to rate this answer.
SnehaAgrawal-MSFT 22,171 Reputation points

2020-07-20T14:05:19.87+00:00

@Danejahtt-0724 Thanks for reaching here! Could you please open a new issue with more details, to help you better on this.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Achieve country level blocking while using azure traffic manager and azure application gateway with WAF

1 additional answer

Your answer