Users can block an entire TLD for their organization by adding the TLD to their manually filtered domains list at https://dnswatch.watchguard.com/domains/filtered/.