Access Control by geographic locations allows you to restrict access to applications by users from some specific countries or cities.
A pre-requisite to implementing access control by geo location is to have the geo-location data.
| Expand | ||
|---|---|---|
| ||
- How to import IP2Location-IPV4 Geo Location database into DualShield - How to import IP2Location-IPV6 Geo Location database into DualShield |
Access control by Geo LOcation Location is implemented by creating an "Access Control - Location" policy. The The example below creates an access control system that denies access to all applications if a user is located in Russia or Noth Korea.
Please note that with this policy in place, if a user is not located in Russia or North Korea, then the user will be allowed access to all applications.
Please also note the following
- this policy applies to all users in the system, as the policyholder is "System"
- this policy applies to all applications, as there is no application specified