We are thinking of using Firepower's Geolocation database to block all incoming IP traffic from both China and Russia. My organization has no business dealing with any of those countries. That is not to say we do not see any traffic already blocked from both of those countries. We get lots of "dropped traffic from both in our logs. Has anyone else tried using this as a basis for a rule in their access policies? Are there any drawbacks to doing this?
