question

RenatoPereira avatar image
0 Votes"
RenatoPereira asked GitaraniSharmaMSFT-4262 edited

Azure Firewall for VPS - how to limit countries requests dynamically

Hi,

we have a VPS running at Azure BR-SP datacenter which is facing issues (attacks) from some countries; since our customers is only located in BR regions, there is a service to be purchased and implemented to protect our server dinamically blocking other countries??
Today we monitor some logs and mannualy block that IP ranges.

  • our server runs webservices

azure-firewall
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

GitaraniSharmaMSFT-4262 avatar image
0 Votes"
GitaraniSharmaMSFT-4262 answered GitaraniSharmaMSFT-4262 edited

Hello @RenatoPereira-8565 ,

May I know what service is to be purchased and implemented to protect the server by blocking other countries?

If you are looking into Azure Firewall as I see in the query heading, it does not support geo based rules yet. You can upvote the feature in the below forum for the product team to make the improvements:
https://feedback.azure.com/forums/217313-networking/suggestions/37397986-azure-firewall-geo-based-rules

The available options would be the below:

  1. Azure Application gateway WAF geomatch custom rules which is in preview:
    https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/geomatch-custom-rules

  2. Azure CDN content restriction:
    https://docs.microsoft.com/en-us/azure/cdn/cdn-restrict-access-by-country

  3. Geo-filtering on a domain for Azure Front Door:
    https://docs.microsoft.com/en-us/azure/frontdoor/front-door-geo-filtering

  4. Conditional Access: Block access by location:
    https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-location

  5. You can also opt for any 3rd party NVAs (Network Virtual Appliances) from Azure Marketplace which provides geo blocking features:
    https://azure.microsoft.com/en-us/solutions/network-appliances/

Kindly let us know if the above helps or you need further assistance on this issue.


Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.