I am trying to implement a Geo policy which block traffic from certain country from accessing certain IP ad port within our domain. I was told that I can actually use the Geo Policy is the negate way e.g add India in the Geo policy list and set action to accept and set policy for other country to accept too. On the exemption for the policy set the destination to the IP and service port that I want to block. I was told that it will block the traffic to the exemption list since the action on the Geo policy is set to accept. Is anyone able to confirm this solution will work?
