# You have been denied access via a local policy rule such as GeoIP.

- Link: https://www.agilicus.com/faq/you-have-been-denied-access-via-a-local-policy-rule-such-as-geoip/
- Published: 2025-10-27T22:53:12+00:00
- Author: Don Bowman

The user may see this error “You have been denied access via a local policy rule
such as GeoIP.” on trying to use a resource. This is something your end user will
see when opening a web application that is normally available through the Agilicus
Connector.

This indicates that a policy has returned false, denying access. This could be a
geo-ip policy, a multi-factor authorisation policy, a subnet-based policy, etc.

See [Policies](https://www.agilicus.com/anyx-guide/policies/), [Policy-Based Access Control By Subnet](https://www.agilicus.com/anyx-guide/policy-based-access-control-by-subnet/),
[Geo-Location-Based Access Control](https://www.agilicus.com/anyx-guide/geo-location-based-access-control/)
and [Firewall rules](https://www.agilicus.com/anyx-guide/authorisation-rules/) for
more information.

If you are the system administrator, you may look at which specific policies apply
to the given resource, and, which ones might be matching. Also check the connector
logs ([overall](https://www.agilicus.com/faq/can-i-see-the-logs-for-requests-hitting-the-connector/),
[windows](https://www.agilicus.com/faq/retrieve-connector-logs-on-windows/), [Linux](https://www.agilicus.com/faq/retrieve-connector-logs-on-linux/))