Access Control by geographic locations allows you to restrict access to applications by users from some specific countries or cities. 

A pre-requisite to implementing access control by geo location is to have the geo-location data.

Access control by Geo Location is implemented by creating an "Access Control - Location" policy. The example below creates an access control system that denies access to all applications if a user is located in Russia or Noth Korea.

Please note that with this policy in place, if a user is not located in Russia or North Korea, then the user will be allowed access to all applications. 

Please also note the following

• this policy applies to all users in the system, as the policyholder is "System"
• this policy applies to all applications, as there is no application specified