Is it possible to have networks and application filtering in the same access policy rule?

[John.Barbour]

I am trying to get one of my servers access to microsoft updates via the application filtering. However, I think that it is not working because of no DNS capabilities. We want to point their DNS to Cisco Umbrella which I have created as objects. Can I add those networks in the same access policy, or do I have to create another policy to allow access?

[Muhammad Awais Khan]

Hi,

You need to create separate rules for your object ( networks ) with permit access and seperate for permitting microsoft updates.

For example, if you have single rule with networks added in destination and with microsoft updates selected then this rule will allow only microsoft updates traffic desitned to the networks define ( network you defined is for umbrella IPs)

[Rob Ingram]

Hi,

I’d normally create a separate rule, permitting traffic only to the umbrella servers on the required ports, I would also place that rule near the top of the rule set.

HTH