How can I block certain IP ranges from executing policies, without having to manually select every segment when creating a policy? We have a couple hundred network segments globally, and I don't want systems trying to download packages if they are not near a DP.
If I create a network segment with "No Distribution Point" will it try to download from the primary, or will it just fail out?