The POLICY | Rules and Policies > Settings > GEO-IP > Custom List allows you to create custom country lists of IP addresses to either block or allow. This can be useful, for example, if an IP address is mistakenly associated with a blocked country, and you want it to be allowed. Having a custom country list can solve this problem by overriding the firewall country associated with the particular IP address.
For the network security appliance to use the Custom List first, you must enable it and select Override Firewall List.
To add a custom list address object