Thursday, July 29, 2021

Cisco FMC - Access Control + Geolocation

Hey guys

I'm would like to deploy access control policies with geolocation.

We have some servers that are accessible from outside ( HTTPS and HTTP ) , and countries I'd say USA and Canada only.

** I don't wanna block AnyConnect clients by countries**

what do you guys think about it ?

how should I apply the geolocation policies?

Deny > OUTSIDE > ANY > ALL THE COUNTRIES EXPECT ( USA AND Canada)

permit > Outside > MY SERVER > HTTPS/HTTP

is it correct ?



No comments:

Post a Comment