Docs

Web Application Firewall

Configure protection policy

Configure geographic location access control policies

The geographic location access control policy refers to setting network access control rules by country or region based on the home of the source IP. This policy can help you detect access behavior from specified region IPs.

Requirements

You have connected the website that needs to be protected to the WAF instance. For related association operations, please refer to Comparison of website association methods.

Steps

Select the instance region in the top menu bar.

In the left navigation, select Protection Policy > Geo-location Access Control.

Enable geographic location access control for the domain to be protected.

Select the domain to which you want to add the policy.

(Optional) Confirm that the protection mode of the current domain is "Protection enabled". Otherwise, click Change protection mode to modify it.

Turn on the policy enable switch.

Sets the policy mode.

Intercept: Intercept the request and report the request information to the attack log.

Observe: Release the request and report the request information to the attack log.

Click Add regions, select the areas or countries that need to be banned.

Click OK to complete the banned area configuration.

Once configured, you can view banned areas in the Geo-Location Access Control Banned List or delete areas that no longer need to be banned.

Last updated: 2025.06.30 16:22:21