Skip to content

Commit c10688c

Browse files
authored
Merge pull request #299144 from halkazwini/waf-geo
Freshness
2 parents 3ea9657 + ecf5062 commit c10688c

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

articles/web-application-firewall/ag/geomatch-custom-rules.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: halkazwini
55
ms.author: halkazwini
66
ms.service: azure-web-application-firewall
77
ms.topic: concept-article
8-
ms.date: 09/05/2023
8+
ms.date: 04/30/2025
99
---
1010

1111
# Geomatch custom rules
@@ -15,16 +15,16 @@ Custom rules allow you to create tailored rules to suit the exact needs of your
1515
To create a geo-filtering custom rule in the Azure portal, select *Geo location* as the Match Type, and then select the country/region or countries/regions you want to allow/block from your application. When creating geomatch rules with Azure PowerShell or Azure Resource Manager, use the match variable `RemoteAddr` and the operator `Geomatch`. For more information, see [how to create custom rules in PowerShell](configure-waf-custom-rules.md) and more [custom rule examples](create-custom-waf-rules.md).
1616

1717
> [!NOTE]
18-
> Geo-filtering works based on mapping each request's IP address to a country or region. There might be some IP addresses in the data set that are not yet mapped to a country or region. To avoid accidentally blocking legitimate users, Application Gateway's WAF allows requests from unknown IP addresses.
18+
> Geo-filtering works based on mapping each request's IP address to a country or region. There might be some IP addresses in the data set that aren't yet mapped to a country or region. To avoid accidentally blocking legitimate users, Application Gateway's WAF allows requests from unknown IP addresses.
1919
2020
> [!IMPORTANT]
21-
> Include the country code **ZZ** whenever you use geo-filtering. The **ZZ** country code (or *Unknown* country/region) captures IP addresses that are not yet mapped to a country or region in our dataset. This avoids false positives.
21+
> Include the country code **ZZ** whenever you use geo-filtering. The **ZZ** country code (or *Unknown* country/region) captures IP addresses that aren't yet mapped to a country or region in our dataset. This avoids false positives.
2222
23-
## Country/Region codes
23+
## Country/region codes
2424

25-
If you're using the Geomatch operator, the selectors can be any of the following two-digit country/region codes.
25+
If you're using the *geomatch* operator, the selectors can be any of the following two-digit country/region codes.
2626

27-
|Country/Region code | Country/Region name |
27+
|Country/region code | Country/region name |
2828
| ----- | ----- |
2929
| AD | Andorra |
3030
| AE | United Arab Emirates|
@@ -55,7 +55,7 @@ If you're using the Geomatch operator, the selectors can be any of the following
5555
| BM | Bermuda|
5656
| BN | Brunei|
5757
| BO | Bolivia|
58-
| BQ | Bonaire, Sint Eustatius and Saba|
58+
| BQ | Bonaire, Sint Eustatius, and Saba|
5959
| BR | Brazil|
6060
| BS | Bahamas|
6161
| BT | Bhutan|
@@ -275,7 +275,7 @@ If you're using the Geomatch operator, the selectors can be any of the following
275275
| ZM | Zambia|
276276
| ZW | Zimbabwe|
277277

278-
## Next steps
278+
## Related content
279279

280280
- [Create your own custom rules](create-custom-waf-rules.md)
281281
- [Use Azure WAF geomatch custom rules to enhance network security](../geomatch-custom-rules-examples.md)

0 commit comments

Comments
 (0)