Guidelines for managing remote access VPN users based on geolocation

In a service access object, use a geolocation object (country, continent, or geolocation object) only in one rule.

Configure the service access rules in the correct order because you cannot reorder these rules.