Block traffic by geographical location

This example custom rule blocks requests by autonomous system number (ASN), continent, or country of origin.

• When incoming requests match:

  Field	Operator	Value	Logic
  AS Num	equals	131279	Or
  Continent	equals	Asia	Or
  Country	equals	Korea, North

  If you are using the expression editor:
  (ip.src.asnum eq 131279) or (ip.src.continent eq "AS") or (ip.src.country eq "KP")

• Then take action: Block

• Use case: Block traffic from specific countries
• Use case: Allow traffic from specific countries only
• Fields reference: Geolocation