To restrict traffic from geographic regions or certain categories of traffic, Barracuda WAF-as-a-Service provides an IP filter that can be applied to an entire geographic region or collection of regions spanning multiple countries and/or continents.
Traffic from the selected geographic regions and source categories is blocked at the Barracuda WAF-as-a-Service proxy and will not reach the back-end server. You can configure an exception list of IP subnets to override the IP filter and allow certain traffic, even if it originates from a blocked source.