topic Re: How to block foreign countries? in Network Security https://community.cisco.com/t5/network-security/how-to-block-foreign-countries/m-p/993610#M916543 <HTML><HEAD></HEAD><BODY><P>You would need to gather info on Public IP block assigments by country, based on gather IP block assigments you can block the entrirely ip blocks at an edge router outside your firewall, you can create a deny acl, summarize ip blocks assigememst using wildcard mask and apply it to your inbound interface. </P><P></P><P>Database search for IP blocks by countries</P><P><A class="jive-link-custom" href="http://www.countryipblocks.net/" target="_blank">http://www.countryipblocks.net/</A></P><P></P><P>Info on IANA, global coordination of IP global addressing. </P><P><A class="jive-link-custom" href="http://www.iana.com/" target="_blank">http://www.iana.com/</A></P><P></P><P>Follow similar example on bellow link acls but use unwanted public IP blocks in acls.</P><P></P><P>Filtering at the edge</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/tech/tk648/tk361/technologies_white_paper09186a00801afc76.shtml" target="_blank">http://www.cisco.com/en/US/tech/tk648/tk361/technologies_white_paper09186a00801afc76.shtml</A></P><P></P><P></P><P>Rgds</P><P>Jorge</P></BODY></HTML> Thu, 17 Jul 2008 20:09:19 GMT JORGE RODRIGUEZ 2008-07-17T20:09:19Z How to block foreign countries? https://community.cisco.com/t5/network-security/how-to-block-foreign-countries/m-p/993609#M916541 <P>Is there a simple way to block ip addresses by foreign countries? There is so many network addresses needs to be blocked, it seems it is not practical on the ASA. Can someone give me some suggestions on this? </P> Mon, 11 Mar 2019 13:16:11 GMT https://community.cisco.com/t5/network-security/how-to-block-foreign-countries/m-p/993609#M916541 kope 2019-03-11T13:16:11Z Re: How to block foreign countries? https://community.cisco.com/t5/network-security/how-to-block-foreign-countries/m-p/993610#M916543 <HTML><HEAD></HEAD><BODY><P>You would need to gather info on Public IP block assigments by country, based on gather IP block assigments you can block the entrirely ip blocks at an edge router outside your firewall, you can create a deny acl, summarize ip blocks assigememst using wildcard mask and apply it to your inbound interface. </P><P></P><P>Database search for IP blocks by countries</P><P><A class="jive-link-custom" href="http://www.countryipblocks.net/" target="_blank">http://www.countryipblocks.net/</A></P><P></P><P>Info on IANA, global coordination of IP global addressing. </P><P><A class="jive-link-custom" href="http://www.iana.com/" target="_blank">http://www.iana.com/</A></P><P></P><P>Follow similar example on bellow link acls but use unwanted public IP blocks in acls.</P><P></P><P>Filtering at the edge</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/tech/tk648/tk361/technologies_white_paper09186a00801afc76.shtml" target="_blank">http://www.cisco.com/en/US/tech/tk648/tk361/technologies_white_paper09186a00801afc76.shtml</A></P><P></P><P></P><P>Rgds</P><P>Jorge</P></BODY></HTML> Thu, 17 Jul 2008 20:09:19 GMT https://community.cisco.com/t5/network-security/how-to-block-foreign-countries/m-p/993610#M916543 JORGE RODRIGUEZ 2008-07-17T20:09:19Z How to block foreign countries? https://community.cisco.com/t5/network-security/how-to-block-foreign-countries/m-p/993611#M916545 <HTML><HEAD></HEAD><BODY><P> Hi Sir,</P><P></P><P>I would like to know how to allow&nbsp; the IP blocks only in USA </P></BODY></HTML> Sat, 22 Dec 2012 18:14:20 GMT https://community.cisco.com/t5/network-security/how-to-block-foreign-countries/m-p/993611#M916545 Abhilash Paul 2012-12-22T18:14:20Z