Block traffic by geographical location

This example custom rule blocks requests by autonomous system number (ASN), continent, country of origin, or region.

• Expression: (ip.src.asnum eq 131279) or (ip.src.continent eq "AS") or (ip.src.country eq "KP") or (ip.src.region_code eq "CA")
• Action: Block

Other resources

• Use case: Block traffic from specific countries
• Use case: Allow traffic from specific countries only
• Fields reference: Geolocation