Geo location base rule

[Vishal07]

Hi All,

Can we configure geo location base rule/access rights for client vpn and port forwarding rules ?

[rhbirkelund]

Unfortunately no, it is not possible to apply rules and portforwardings based on GeoIp.

[PhilipDAth]

>Can we configure geo location base rule/access rights for client vpn

For client VPN, if you use Cisco Secure Connect and a SAML provider that can enforce Geo restrictions, yes.

https://duo.com/blog/easily-enable-conditional-access-by-country-with-duo 

[Vishal07]

Hi Philip,

We dont have duo.

[PhilipDAth]

You don't have to have Duo.  You can use any Idp that supports geographic restrictions.  Another example is AzureAD/EntraID with an appropriate licence for conditional access.

I'm just giving you what is required to do what you have asked.  You need to buy all the appropriate bits of the solution for it to work.  Buying only some of the bits ... well that just wont work.