Geo-blocking functionality stopped the email in Scan-time Protection Policy as the sender's country IP address was recognized incorrectly.
Email Security.cloud
Geo-IP lookup is done via the WebPulse GeoIP C++ Library, which uses the MaxMind GeoIP Database.
Contact Broadcom Technical Support in case the verdict is different from the one returned using MaxMind IP checker.