We are trying to block few public ips in zone-based firewall. What typically in zone-based firewall, we can control based on protocol. Can we add an access list to be filtered in zone-based firewall policy map?

Just wanted to know how can I summarize individual ip routes from user vpn to a summary route to upstream devices.