how to block all video and audio streaming in fortigate 110c

[shimonb]

hello to all i will be happy if someone can help me !! i need to block all video and audio streaming in my org ... i have a fortigate 110c with web filter . please help if you can ... thank you

[shimonb]

thank you :) i have done all of it and now i have a question ... if i add the UTM to en existing profile that holds all the users i want to block , will it block from it down or from the one under it and down ?? and also if i have one site that the streaming is not blocked.. what can i do to block it on this site ? you are so kind ... thank you ...

[dominikw]

If I understad your question well - you want to know right order of rules. General : 1. Create proper firewall rule 2. Create proper UTM profile (or profiles = AV+IPS+WebF+...) 3. Attach profile (profiles) to firewall rule. If you have two rules I.E. : 1. from LAN (all) to WAN (all) + WebFilter allow ... 2. from LAN (some_adresses) to WAN (all) + WebFilter block ... then everyone has " full" access. If you wan restrict " some addresses" you have to change rules order so " block rule" is first : 2. from LAN (some_adresses) to WAN (all) + WebFilter block ... 1. from LAN (all) to WAN (all) + WebFilter allow ... Upper rule if fit traffic (some_addreses) is execute (and next rule is not processed). If traffic doesn' t fit traffic (= all-some_addreses ) then you can browse all web. ID is not important, important is Seq.# (you can see it by setting view options or in Global View) Hope this help a little ;)