Access Control by geographic locations allows you to restrict access to applications by users from some specific countries or cities.
Access control by Geo Location is implemented by creating an "Access Control - Location" policy.
A pre-requisite to implementing access control by geo location is to have the geo-location data.
| Expand | ||
|---|---|---|
| ||
- How to import IP2Location-IPV4 Geo Location database into DualShield - How to import IP2Location-IPV6 Geo Location database into DualShield |
The Access control by Geo Location is implemented by creating an "Access Control - Location" policy. The example below creates an access control system that denies access to all applications if a user is located in Russia or Noth Korea.
Please note that with this policy in place, if a user is not located in Russia or North Korea, then the user will be allowed access to all applications. 
Please also note the following
- this policy applies to all users in the system, as the policyholder is "System"
- this policy applies to all applications, as there is no application specified