07-04-2019 06:30 AM - edited 02-21-2020 09:16 AM
Hello,
I have a FTD version 6.2.3.13 and an ACP containing 1000's of rules and hundred of zones.
I want to block an application such as facebook for the entire environment.
If I create a rule at the top of the ACP policy and set the zone and network as "any" with application "facebook " and action as "block". This would cause all the other 1000s rule below that rule to be useless, where ALL the traffic other than facebook will be matching this rule and this traffic would be allowed.
The question is how to block application X globally (for any network src and dst) in an ACP with causing the above behavior?
Regards,
George
07-04-2019 06:33 AM
Correction:
The question is how to block application X globally (for any network src and dst) in an ACP ""without"" causing the above behavior?
07-04-2019 07:33 AM
If the application is not equal to "facebook", then the new top rule will not match and the subsequent rules will be evaluated.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide