See available objects in DNS Firewall
When the proxy or the DNS Firewall resolve an IP address, this object is able to search the associated country location.
To make this module available, you must install and configure the Geolocation module
You will see your object populated with desired countries