Not having a NGFW, I do like Marius's replay above.It would be easier to allow your origin country IP ranges and deny all others instead of trying to deny IP ranges from 247 countries.However, I have recently hseard of two separate instances where us...

Anthony, thank your for your answer.  I am checking with our network guys to see if our older  3030VPN box and ASA can support AnyConnect.