If you have an R80.20+ management and gateway, you can do that easily via Updatable Objects. Updatable Objects representing countries can be used like any other object in your rule base. If you have R80.10 or earlier, you could use the Geo Policy/Protection feature to block all traffic from a particular country then create an exception allowing a particular service from that country. A bit roundabout but will work.
Watch My 2023 CPX360 Speech Titled "Max Power
Reloaded: R81+ Gateway Performance Innovations"