So I created a WAF rule to Challenge everywhere except North America and Europe. (If continent <> NA, then Managed Challenge)
This still blocked North America in part. I set GTMetrix to San Antonio and it returned a 403 when tested. When I reversed the rule logic (If continent = South America, Asia, Africa, etc), the rule worked as expected. What’s going on?