Restrict Access based on country using LTM or ASM

[root@ve1023:Active] config  b rule myrule list
rule myrule {
   when CLIENT_ACCEPTED {
        switch [whereis [IP::client_addr] country] {
                CN -
                RU { drop }
                default {
                        do something else
                }
        }
}
}