cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5983
Views
0
Helpful
3
Replies

AnyConnect and Geo Blocking

Lisa Garrison
Level 1
Level 1

Is it possible to enable geo blocking to block specific "bad" sources from being able to connect to the ASA using the AnyConnect client? 

3 Replies 3

Hi,

If you know the source IP address(es) the best you can do is define an ACL denying traffic from the source IP address and permit all other. This ACL would be applied to the control-plane. Example of control-plane ACL here.

 

HTH

 

 

Thank you for the confirmation.   I figured that was the only option but wanted to be sure.   Thanks.

aninayak
Cisco Employee
Cisco Employee
No Geo-filtering option available on ASA. Where as in FirePOWER Geo Blocking is available.
In ASA, using ACL based rule is the only option
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: