Staying InvolvedVery powerful. I wouldn't like to make a typo and enter com by mistake!
Our organisation has a standardised geo-blocking policy and Cato is one of the products we use that this applies to. I like how Cato can have separate country blocking rules for Outbound and Inbound. We restrict a lot more inbound Remote Port Forwarding traffic compared to Outbound.
Hong Kong is one country we block Outbound. We do see some blocked CDN traffic in our logs for Hong Kong, but this doesn't have a negative impact on users. it does highlight the need to be cautious. Therefore, it would be more useful to be able to be more granular in the rules as to which traffic this applies to. Most other Cato policies follow the standard rulebase, where you specify the Source and What etc. But the IPS policies are a lot more simpler.