Is there any functionality available in azure out of the box to block access to a website or server from specific countries? In a larger project that I'm involved with, we have an Imperva WAF and Palo Alto firewall that provide geo-blocking support. However, the site in question is pretty small and couldn't support the added expense of these solutions.
Asked
Active
Viewed 4,919 times
3 Answers
3
Azure websites don't have an geo filtering built in, however the Azure CDN provider does have geo filtering so that might be something to look at. Still an extra cost, but not as bad as a WAF.
Sam Cogan
- 38,158
- 6
- 77
- 113
1
A lot of config but you could use IPSecurity in the web.config and just block the CIDRs of whatever regions you don't want connecting.
https://www.iis.net/configreference/system.webserver/security/ipsecurity
Get ranges and subnets from arin. Here is an example of APNIC (Asian Pacific)
Mike Kauspedas
- 56
- 3
-
That works as long as the `web.config` stays under 250KB. Then you have to change a registry key, which you can't do on Azure Websites. – nmit026 Dec 12 '17 at 07:58
