Unblocking websites that are from a region that we block

[GregoryClark]

So after a ransomware attack back in september, we started blocking traffic from certain regions.  However I have users that are trying to access legitamate sites from those regions.  Is it possible to block the regions, but allow sites from said regions?

[OtakarKlier]

Hello,

Yes, you can do it one of several ways:

1. put in a security policy above your policy that is used to block the region with sites/ip's you allow
2. remove the security policy that blocks the religion and only block the sites that have the badness (make sure to have wildfire, dnssink hole, and a secure DNS provider)

There could be others I am not thinking of at the moment.

Regards,