You Are Where?
Geo-Location-Based Access Control
It is possible to allow/deny access to individual resources based on the country their inbound IP is coming from.
Geo-Location-Based Access Control
![Geo-Location-Based Access Control 2 d1008dbe image](https://www.agilicus.com/www/d1008dbe-image-1024x734.png)
It i possible to allow/deny access to individual resources based on the country their inbound IP is coming from.
Note:As with all IP-based lookup schemes, a user coming via VPN can appear in an alternate location.
Geo-location is done at the granularity of country. Countries are identified by their ISO-code (a 2-letter code unique per country).
Rules have priorities. Lower numbers evaluate first. Rules with the same priority evaluate in parallel, taking the most restrictive answer.
Actions include:
- Allow
- Deny
- Log
An example configuration allowing (priority-0 evaluates first) traffic from Canada, US, and denies (priority-1, NOT Canada, US) the remainder is shown below.
![Geo-Location-Based Access Control 3 9e92fdd0 image](https://www.agilicus.com/www/9e92fdd0-image-1024x306.png)