Azure Firewall for VPS - how to limit countries requests dynamically

Renato Pereira 191 Reputation points
2021-05-19T20:08:59.997+00:00

Hi,

we have a VPS running at Azure BR-SP datacenter which is facing issues (attacks) from some countries; since our customers is only located in BR regions, there is a service to be purchased and implemented to protect our server dinamically blocking other countries??
Today we monitor some logs and mannualy block that IP ranges.

  • our server runs webservices
Azure Firewall
Azure Firewall
An Azure network security service that is used to protect Azure Virtual Network resources.
662 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. GitaraniSharma-MSFT 49,591 Reputation points Microsoft Employee
    2021-05-25T13:10:35.293+00:00

    Hello @RenatoPereira-8565 ,

    May I know what service is to be purchased and implemented to protect the server by blocking other countries?

    If you are looking into Azure Firewall as I see in the query heading, it does not support geo based rules yet. You can upvote the feature in the below forum for the product team to make the improvements:
    https://feedback.azure.com/forums/217313-networking/suggestions/37397986-azure-firewall-geo-based-rules

    The available options would be the below:

    1. Azure Application gateway WAF geomatch custom rules which is in preview:
      https://video2.skills-academy.com/en-us/azure/web-application-firewall/ag/geomatch-custom-rules
    2. Azure CDN content restriction:
      https://video2.skills-academy.com/en-us/azure/cdn/cdn-restrict-access-by-country
    3. Geo-filtering on a domain for Azure Front Door:
      https://video2.skills-academy.com/en-us/azure/frontdoor/front-door-geo-filtering
    4. Conditional Access: Block access by location:
      https://video2.skills-academy.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-location
    5. You can also opt for any 3rd party NVAs (Network Virtual Appliances) from Azure Marketplace which provides geo blocking features:
      https://azure.microsoft.com/en-us/solutions/network-appliances/

    Kindly let us know if the above helps or you need further assistance on this issue.

    ----------------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.