Country Level blocking possible to Azure VM with Public IP ?

Question

Is it possible to achieve county level blocking to an Azure VM with an associated Public IP ?

Answer 1

Is this for HTTP/HTTPS traffic or something else like RDP/SSH?

You would have to put a service in front of it that supports this feature and connect via that service.

It could be a firewall or Traffic Manager or Azure Front Door (HTTP/HTTPS only).

https://learn.microsoft.com/en-us/azure/traffic-manager/traffic-manager-configure-geographic-routing-method

https://learn.microsoft.com/en-us/azure/frontdoor/front-door-geo-filtering

Answer 2

Hi there,

Custom rules allow you to create tailored rules to suit the exact needs of your applications and security policies. Now, you can restrict access to your web applications by country/region.

You can create custom rules to suit the exact needs of your applications and security policies and restrict access to your web applications by country/region. To create a geo-filtering custom rule, select Geo-location as the Match Type, and then select the country you want to allow/block from your application.

Some useful article links that might help you in getting some insights are listed below. Geomatch custom rules https://learn.microsoft.com/en-us/azure/web-application-firewall/ag/geomatch-custom-rules

Block/allow specific IP addresses on Azure Cloud Services https://techcommunity.microsoft.com/t5/azure-paas-blog/block-allow-specific-ip-addresses-on-azure-cloud-services/ba-p/2769203

-----------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–

Answer 3

We decided to go with a NSv appliance. Thanks for all the input!