Block OFAC-Sanctioned Countries

This template provides a preset, customizable Vercel Firewall rule which is designed to support your compliance with US export control regulations by offering the ability to restrict access from sanctioned and embargoed regions.

Overview

Identify incoming requests based on their country of origin and block access from specified OFAC-sanctioned countries. The list is not meant to be exhaustive, and may not include all sanctioned countries as of any given date. Updating and customizing the list of countries, ensuring that the firewall rule is operating as intended, and otherwise maintaining the compliance of your product and operations remains your responsibility.

Consider customization

The generated Firewall rule provides a basic structure for blocking traffic from countries sanctioned by the Office of Foreign Assets Control (OFAC). Consider customizing the following parameters to suit your specific compliance needs:

1. Country List: Update the list of countries to be blocked based on the latest government sanctions program or any countries you desire to add.
2. Exception Handling: Configure exceptions for specific IP addresses or entities that require access despite country restrictions.

Persistent Action

The rule includes a persistent action set to a duration of 1 hour. Any requests blocked due to persistent actions, which are activated after the first violation of the rule, are blocked before any usage is incurred.

Availability

This solution can be implemented by users on all plans.

To Use

To use this template, follow these steps:

1. Click "Add Firewall Rule."
2. Select your team and project.
3. Configure the rule to block traffic from countries sanctioned by the Office of Foreign Assets Control (OFAC) as necessary.
4. Don't forget to hit "Save," and then "Publish" to activate the rule.