topic Re: Block Porn site in Firewall and Security Management

Block Porn site

Moudar — Mon, 15 Jan 2024 09:27:45 GMT

Hi,

Ukdevilz.com is a website that predominantly features adult content, leading to its classification as a pornographic platform. It is worth noting, however, that despite its explicit content, the website is intriguingly categorized as a search engine or portal. This unique classification may be attributed to its potential incorporation of search functionalities or diverse content offerings beyond explicit material. Despite its primary focus, Ukdevilz.com seems to adopt an unconventional role, perhaps combining aspects of a traditional search engine or portal within the context of its adult-oriented content.

What factors contribute to the assignment of such a specific category to this website? How can one go about unveiling or identifying websites that fall into this particular classification?

This is a school environment and students try always to find a new way to bypass the firewall and they have successded this time.

I tried to block it with no success:

I have tried *.ukdevilz.com, ukdevilz.com and *ukdevilz* and nothing is hitting right

it still get Accept by the access policy even if it is blocked by the url filtring blade.

Pornhub.com is blocked by that same rule!

Any ideas?

Re: Block Porn site

Tal_Paz-Fridman — Mon, 15 Jan 2024 10:44:12 GMT

Can you check how a connection to the site appears in the log? This will help you define it in the Custom Application/Site.

Re: Block Porn site

Moudar — Mon, 15 Jan 2024 11:59:09 GMT

it is Quic udp/443 which lets the website baypass my rule.

How to add that port to the custom applicatioon site object?

Re: Block Porn site

Chris_Atkinson — Mon, 15 Jan 2024 14:27:53 GMT

Currently it is best practice to block QUIC and force traffic to HTTPS where it can be inspected.

Re: Block Porn site

Moudar — Mon, 15 Jan 2024 14:50:02 GMT

If i want to create one access rule or url filter rule to block ukdevilz.com

How would the source looks like?

Re: Block Porn site

CaseyB — Mon, 15 Jan 2024 14:53:52 GMT

Have you submitted a request to get it re-categorized? My requests are usually pushed through in a day or less, I normally just wait for that to kick-in, unless someone cannot wait.

URL Categorization | Check Point Software Technologies

Re: Block Porn site

Moudar — Mon, 15 Jan 2024 15:12:25 GMT

I have currently lodged a request to have it reassessed for categorization. I am optimistic that it will be appropriately reclassified once the reassessment is completed.

Re: Block Porn site

the_rock — Mon, 15 Jan 2024 15:27:11 GMT

I will tell you way I do this and it always works. So, say you want to block anything pornhub, all I would do is this. Make sure urlf blade is enabled, also in policy layer editor and then create custom app object as below and rule would look like this. Doc attached. My example is just one ordered layer, but if you have multiple, then say 2nd ordered layer can have ONLY urlf blade on, as an example. If any issues, just message me, we can do remote and Im happy to show you.

Best,

Andy

Re: Block Porn site

Moudar — Mon, 15 Jan 2024 16:17:44 GMT

now it is working

Re: Block Porn site

the_rock — Mon, 15 Jan 2024 17:25:41 GMT

So all good now?

Andy

Re: Block Porn site

the_rock — Mon, 15 Jan 2024 17:37:56 GMT

Sorry, just read your thing at the bottom saying its working, even at 44, you think I should read WHOLE thing haha

Anyway, glad its fixed. I will say though, blocked sites may look little goofy without https inspection on, but does work.

Best,

Andy