Summarizing what's been said above: - Applying L7 geo-blocking firewall rules should block connections to websites of those countries. - If you have any existing connections through the MX, you may need to wait for them to timeout (~5 minutes from memory) before they will be blocked. New connections should be blocked as soon as the MX receives the updated config from the dashboard (~30 seconds). - L7 geo-blocking firewall rules will not block inbound connections into DNAT rules.
... View more
