USG60 - cannot set up FQDN site block

Options
AVK
AVK Posts: 1 image  Freshman Member
edited April 2021 in Security
Hi, I have USG60 (V4.60)  with fast-forwarding on.  Only security policy service enabled. 

I am trying to block youtube via FQDN - followed the instructions from https://support.zyxel.eu/hc/en-us/articles/360001390374-How-to-block-websites-via-FQDN-entry-

Shows no error but does not block the traffic; doesn't say anything in the log. Is it because of fast-forwarding? Any advice?

thanks

Comments

  • PeterUK
    PeterUK Posts: 4,422 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary

    I'm not sure if fast-forwarding affects FQDN but to block youtube you must use DNS and not DNS over TLS.

    To block the Videos for youtube its:

    *googlevideo.com


  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,368 image  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fifth Anniversary
    Hi @AVK

    The fast forwarding will bypass UTM profile setting but keep security policy action that means youtube website will still be blocked. Maybe you can clean your cache of device and try it again.

  • chandan
    chandan Posts: 72 image  Ally Member
    First Comment Friend Collector Second Anniversary
    Or simply you can use "App Patrol" to block youtube on the destination computer.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）