topic Re: Application control and url filtering rules in Firewall and Security Management

Application control and url filtering rules

carl_t — Mon, 26 Oct 2020 11:32:40 GMT

Hi All

I have a quick question when using App control and url filtering on the firewall.

Under the application control layer, for example if I add facebook, is that all I need to do?

Under the security blade, would I need to create a rule for the internet to anywhere on 80/443 first? or would the app rule do this for me?

cheers

Re: Application control and url filtering rules

AlejandroH — Mon, 26 Oct 2020 13:15:11 GMT

What are you trying to do? Give access to FB to only a group of people? Block Facebook? Remove the option for uploads? There are a lot of options depending on what you are trying to accomplish.

If you already have an internet outbound rule towards the internet, it then look at the App/URL blade after that accept. So yes 80/443 would the absolute least required but as you see in screenshot, sometimes it will be other ports needed..

Re: Application control and url filtering rules

Chris_Atkinson — Mon, 26 Oct 2020 13:20:25 GMT

In an ordered layer scenario the HTTPS/HTTP traffic would need to be accepted first.

Refer also:

https://community.checkpoint.com/t5/Policy-Management/Policy-Layers-in-R80-x/td-p/1717