So I am working on getting our firepower for our company setup. So far got things set up for the most part. Now I am just getting connectivity over site-to-site and make sure I can access servers and services throughout. I was adding rules for our XDR and MDR to make sure they dont get blocked and also the streaming service we use to access the desktops. However when I was adding more rules the analyzer keeps saying that all my rules under are "Shadowing". Saying that none of the rules are going to be hit because the proceeding rule matches. However I doubt see how this is true.
The rule its matching on is the Geo-Block rule. We as a company have no reason to access or use anything outside North America. So I have it hard blocking any geo locations seen below:
in the Geo-Block-All every country is selected but USA and Canada.
The analyzer says this otherwise says that it matches the preceding rule. But what I notice in the defenseorchestrator it shows any for the destination network? So I dont know if this is the bug or I am doing something wrong?
