Achieve country level blocking while using azure traffic manager and azure application gateway with WAF

Question

We have used azure traffic manager and azure application gateway with a Web application firewall for MVC C# web Application which hosted on the Azure virtual machine.

For security reasons, we need to allow specific IP addresses and block access at the country level. But, We are unable to find a way to block access at the country level and also allow specific IP addresses from that country.

Can you please guide a way/ feasibility to achieve this?
Does it need any other azure service or can be it achieved with existing services/configuration.

Answer 1

Thanks for asking question! You can create Custom rules to suit the exact needs of your applications and security policies and restrict access to your web applications by country/region. To create a geo-filtering custom rule, select Geo-location as the Match Type, and then select the country you want to allow/block from your application.

For more information, see Geomatch custom rules (preview).

Answer 2

Hey Good day, How are you guys.

Is the Geo-location working now with AppGW>?

Thanks