Azure Firewall for VPS - how to limit countries requests dynamically

Question

Hi,

we have a VPS running at Azure BR-SP datacenter which is facing issues (attacks) from some countries; since our customers is only located in BR regions, there is a service to be purchased and implemented to protect our server dinamically blocking other countries??
Today we monitor some logs and mannualy block that IP ranges.

• our server runs webservices

Answer 1

Hello @RenatoPereira-8565 ,

May I know what service is to be purchased and implemented to protect the server by blocking other countries?

If you are looking into Azure Firewall as I see in the query heading, it does not support geo based rules yet. You can upvote the feature in the below forum for the product team to make the improvements:
https://feedback.azure.com/forums/217313-networking/suggestions/37397986-azure-firewall-geo-based-rules

The available options would be the below:

1. Azure Application gateway WAF geomatch custom rules which is in preview:
   https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/geomatch-custom-rules
2. Azure CDN content restriction:
   https://learn.microsoft.com/en-us/azure/cdn/cdn-restrict-access-by-country
3. Geo-filtering on a domain for Azure Front Door:
   https://learn.microsoft.com/en-us/azure/frontdoor/front-door-geo-filtering
4. Conditional Access: Block access by location:
   https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-location
5. You can also opt for any 3rd party NVAs (Network Virtual Appliances) from Azure Marketplace which provides geo blocking features:
   https://azure.microsoft.com/en-us/solutions/network-appliances/

Kindly let us know if the above helps or you need further assistance on this issue.

----------------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.