USG60 - cannot set up FQDN site block

AVK
AVK Posts: 1
edited April 2021 in Security
Hi, I have USG60 (V4.60)  with fast-forwarding on.  Only security policy service enabled. 

I am trying to block youtube via FQDN - followed the instructions from https://support.zyxel.eu/hc/en-us/articles/360001390374-How-to-block-websites-via-FQDN-entry-

Shows no error but does not block the traffic; doesn't say anything in the log. Is it because of fast-forwarding? Any advice?

thanks

Comments

  • PeterUK
    PeterUK Posts: 2,705  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer

    I'm not sure if fast-forwarding affects FQDN but to block youtube you must use DNS and not DNS over TLS.

    To block the Videos for youtube its:

    *googlevideo.com


  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,063  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Hi @AVK

    The fast forwarding will bypass UTM profile setting but keep security policy action that means youtube website will still be blocked. Maybe you can clean your cache of device and try it again.

  • chandan
    chandan Posts: 72  Ally Member
    First Anniversary 10 Comments Friend Collector
    Or simply you can use "App Patrol" to block youtube on the destination computer.

Security Highlight