Route53 HealthChecks are dropped when Region Based Blocking feature is enabled with source-region US

• Starting from Prisma Access 3.1.2, Block Incoming Connections from Specific Countries feature has been supported.
  • Features in Prisma Access 3.1

"Block Incoming Connections from Specific Countries for GlobalProtect, Explicit Proxy, and Remote Network Deployments"

• When we enable this with source-region US, Route53 HealthCheck packets from AWS will be also dropped by the security policy.

• Prisma Access
• Route53 HealthChecks

As per the current design, we cannot accept only HealthChecks while blocking other all access attempts from US.

This feature should be used only for blocking traffic from certain risky countries.

Block Incoming Connections from Specific Countries