Hi @ John Rice,
Just want to confirm how your whitelist and blacklist are preset?
If you preset entries in the Microsoft 365 Defender portal Tenant Allow/Block List, it should start working 99.999% of the time after adding the allow/ block entry.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.