AnyConnect and Geo Blocking

[Lisa Garrison]

Is it possible to enable geo blocking to block specific "bad" sources from being able to connect to the ASA using the AnyConnect client? 

[Rob Ingram]

Hi,

If you know the source IP address(es) the best you can do is define an ACL denying traffic from the source IP address and permit all other. This ACL would be applied to the control-plane. Example of control-plane ACL here.

HTH

[Lisa Garrison]

Thank you for the confirmation.   I figured that was the only option but wanted to be sure.   Thanks.

[aninayak]

No Geo-filtering option available on ASA. Where as in FirePOWER Geo Blocking is available.
In ASA, using ACL based rule is the only option