cisco asa geo blocking.

[nilesh.dubey]

Is there a way by which we can block all the connections from a country on Cisco ASA, without we manually defining a ACL.

Hardware- Cisco ASA5510-

Version - 9.0

[Dinesh Moudgil]

ASA can only block country IP addresses via ACL.
You can get the country ip blocks from here:-http://www.find-ip-address.org/ip-country/
And then you can implement ACL's to block traffic coming in from these subnet range's.

Here is a good link for your reference:-

http://blogs.cisco.com/security/block-a-country-with-my-cisco-router-or-firewall

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.

[nilesh.dubey]

Hi Dinesh,

Thanks for your response!!

But implementing access-list is a very hectic and manual task and I need something automated without manually define access-list.

Regards

Nilesh

[Dinesh Moudgil]

Hi Nilesh,

I am afraid as of now we only have ACLs to employ such feature.

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.

[nilesh.dubey]

Hi Dinesh,

its okay,

I am happy with your response. Thank you so much.

Regards

Nilesh

[Dinesh Moudgil]

Hello Nilesh,

Please kindly mark the post as answered if it addresses your concern to help other community members to leverage from the discussion.

Regards,
Dinesh Moudgil