topic cisco asa geo blocking. in Network Security

cisco asa geo blocking.

nilesh.dubey — Fri, 21 Feb 2020 13:43:25 GMT

Is there a way by which we can block all the connections from a country on Cisco ASA, without we manually defining a ACL.

Hardware- Cisco ASA5510-

Version - 9.0

ASA can only block country IP

Dinesh Moudgil — Thu, 04 Feb 2016 04:05:16 GMT

ASA can only block country IP addresses via ACL.
You can get the country ip blocks from here:-http://www.find-ip-address.org/ip-country/
And then you can implement ACL's to block traffic coming in from these subnet range's.

Here is a good link for your reference:-

http://blogs.cisco.com/security/block-a-country-with-my-cisco-router-or-firewall

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.

Hi Dinesh,

nilesh.dubey — Thu, 04 Feb 2016 10:46:15 GMT

Hi Dinesh,

Thanks for your response!!

But implementing access-list is a very hectic and manual task and I need something automated without manually define access-list.

Regards

Nilesh

Hi Nilesh,

Dinesh Moudgil — Thu, 04 Feb 2016 11:01:43 GMT

Hi Nilesh,

I am afraid as of now we only have ACLs to employ such feature.

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.

Hi Dinesh,

nilesh.dubey — Fri, 05 Feb 2016 15:37:36 GMT

Hi Dinesh,

its okay,

I am happy with your response. Thank you so much.

Regards

Nilesh

Hello Nilesh,

Dinesh Moudgil — Fri, 05 Feb 2016 16:54:39 GMT

Hello Nilesh,

Please kindly mark the post as answered if it addresses your concern to help other community members to leverage from the discussion.

Regards,
Dinesh Moudgil