Cisco Cisco Firepower Management Center 4000

To apply an access control policy that contains geolocation conditions, target managed devices must be 
running Version 5.3 or later of the FireSIGHT System.

You can add either of the following kinds of geolocation conditions to an access control rule:

continents and countries that you select directly from the 

 tab of the 

 list

geolocation objects that you have created using the object manager, which represent custom 
combinations of countries and continents

See 

 for information on creating geolocation objects 

using the object manager.

The following procedure explains how to add source and destination geolocation conditions while 
adding or editing an access control rule. See 

 for more detailed information.

Admin/Access Admin/Network Admin

Select the 

 tab on the rule Edit page.

The Networks page appears.

Under 

, select the 

 tab.

The Geolocation page appears.

Optionally, click the 

 prompt above the 

 list, then type the name 

of a country, continent, object, or country ISO code (such as 

USA

 or 

CHN

).

The list updates as you type to display matching conditions. See 

 

for more information.

Click a condition (country or continent) in the 

 list. Use the Shift and Ctrl keys to select 

multiple conditions, or right-click and then click 

. 

If you select a continent, all countries associated with that continent are automatically selected, as well 
as any countries that GeoDB updates may add under that continent in the future. Deselecting any country 
under a continent deselects that continent as a whole, thereby disabling the automatic addition of future 
countries there. You can select any combination of countries and continents.

Conditions you select are highlighted.

You have the following choices:

To filter traffic by source country or continent, click 

.

To filter traffic by destination country or continent, click 

.

Alternatively, you can drag and drop selected conditions into the 

 or 

 

list.

Conditions you selected are added. Note that you can add the same condition as both a source 
country/continent and a destination country/continent.

Save or continue editing the rule.

You must apply the access control policy for your changes to take effect; see 

.