And if you have Fastvue’s TMG Reporter, you can easily create reports and generate alerts to identify such traffic. This article from the Fastvue blog explains how to do it.
http://www.fastvue.co/blog/monitoring-alerting-and-blocking-countries-with-forefront-tmg