General discussion

I want to block inbound traffic coming from proxies and VPN services, i.e. services such as NordVPN and Hoxx.

I barely knew this existed, but there is a region code "A1" for Anonymous Proxy. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFFCA0

So i created a rule, from "any" to "any", source "A1", destination "any", any app any service, deny, and put it at the top, and committed.

I was unable to block the traffic, testing a client coming through NordVPN, TunnelBear, Hoxx, etc.

The rule is not hit, 0 uses.

Am I misunderstanding the point of this A1 list?

Thanks.