geo policy on website behind haproxy using sni

[Daniel_Kavan]

Hi All,

We want to set up geo protection for certain websites.  However, there many sites behind one IP using SNI behind one IP address on haproxy.    Is this possible to protect one or two URLs (name) with a geo policy?   I know SNI is supported with https inspection.   Or would every project hosted behind that one IP have to be on the policy?

[PhoneBoy · Accepted solution]

I assume this is possible since:

• You can use a geography as a source in a rule
• You can use a Custom Application/Site as a destination (which can be as above) in a rule

SNI doesn't require HTTPS Inspection, FYI. 

[the_rock]

Just use geo objects as @@PhoneBoy  said.

Andy