On Nebula, how do I block an application category with an exception?

henriquev
henriquev Posts: 4  Freshman Member
First Comment Friend Collector
in Nebula

Hello,

Is there any way to block an application category like "media streaming" but allow Youtube?

image.png


The only way I managed to do is blocking everything one by one but leaving the youtube part out.. is that the only way?!

Accepted Solution

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,067  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @henriquev ,

    Thank you for your private message.

    We've identified that you're using the USG FLEX 200, which doesn't support the Forward action in Application Patrol on Nebula. Currently, this feature is only supported by USG FLEX H series devices.

All Replies

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,067  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @henriquev ,

    To meet your requirement, please add a rule to "Forward" the YouTube application above the rule that "Reject" all traffic in the Media Streaming category.
    The firewall processes rules in order, so it will apply the Forward rule for YouTube before reaching the Reject rule.

    image.png
  • henriquev
    henriquev Posts: 4  Freshman Member
    First Comment Friend Collector

    Hi @Zyxel_Judy,

    My nebula does not have an option to change the action nor I managed to add two rows with the same category. Is there anything I need to enable to do it?!

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,067  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @henriquev ,

    Let's add a rule to "Forward" the YouTube application first:

    1. Click on the Search Application combo box
    2. Find and select "YouTube", Action as "Forward"
    3. Click the Add button
    2.png

    Then, add a rule to "Reject" media streaming applications:

    1. Click the Add button
    2. In the Category selection, choose "Media Streaming"
    3. Set the action to "Reject"
    3.png
  • henriquev
    henriquev Posts: 4  Freshman Member
    First Comment Friend Collector

    hi, @Zyxel_Judy,

    The issue is my nebula does not have an option to "forward" there is no option to change the reject as you can see in my screenshots.

    Beside that, If I try to add two of the same category, Nebula aggregates them into one.

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,067  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

    Hi @henriquev ,

    For more assistance with your case, please enable Zyxel support and provide us with the name of your Nebula organization/site here or via the private message by clinking to my account > Message. By the way, please allow us add/ modify rules according to your specific needs.

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,067  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Answer ✓

    Hi @henriquev ,

    Thank you for your private message.

    We've identified that you're using the USG FLEX 200, which doesn't support the Forward action in Application Patrol on Nebula. Currently, this feature is only supported by USG FLEX H series devices.

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）