Can I do Geo IP Filtering on my ASA 5520?

[networkteam]

I was wondering if it's possible to do Geo IP Filtering through my ASA 5520?

[ugabichipaopao]

I suppose you can't. 

For such functionality you need upgrade your ASA 5520 to ASA 5500-X with firepower services (actually you need purchase a new one).

[Karsten Iwen]

Yes, you can. But not in a really "usable way". For that you really would need an ASA with FirePOWER instead of the legacy ASA. What is possible with your ASA:

You download the GeoIP database from MaxMind in CSV-format. You convert the CSV to an ACL-style that you import to the ASA. Every time the database is updates (which is once a month for the free database), you repeat to conversion.

Is that an elegant/efficient way to do it? Probably no. But with some scripting skills, it's definitely possible.