Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What are the better ways of filtering access to the web application based on Geographical location. Is it possible with a network layer firewall or we need an application layer?

share|improve this question
I think this question can be merged with… – Ali Ahmad Dec 27 '12 at 6:15

Filtering in a network firewall will give you a better performance (benchmark to see how much faster it is). Filtering in the application will give you greater flexibility, including notifying people that you don't support access from their country. It's easy to do such a thing from the application, but to do this at a network layer, you need to redirect all new 80/TCP connections, coming from unwanted countries, to a different HTTP server, which will then serve a static webpage explaining the situation. You have to decide what is more important for your particular situation.

share|improve this answer

You can also use free reverse proxy solution that support IP/Geo filtering.

This will be both faster and more user friendly (will combine the advantages of higher level filtering with the ability to present error messages)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.