We GeoIP block outbound traffic, but lately this causes Office apps to hit blocks when they attempt to hit a CDN endpoint in a blocked country (Teams/Co-Pilot/etc). FWIW, we do use Palo Alto's EDLs to manage allow-lists, but we suspect they didn't catch the latest updates. Aside from manually updating or reaching out to Palo Alto about outdated EDLs, is there a way to not hit countries we intend to block?