https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213073#M40511 <P>Forgot to ask, do you have ssl inspection enabled?</P> <P>Andy</P> Fri, 03 May 2024 12:57:07 GMT the_rock 2024-05-03T12:57:07Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/212909#M40471 <P>Hi all,</P><P>I have rule that blocks Google Cloud Platform that consists of an inline rule that allows traffic to the following URLS in order for a specific site to work properly:</P><P>storage.googleapis.com/trafikkort-data/</P><P>storage.googleapis.com/trafikkort-tiles/</P><P>It's an allow rule with a Custom Application Site like this:</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="picture.png" style="width: 768px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/25486i7202F5AACD33AB1D/image-size/large?v=v2&amp;px=999" role="button" title="picture.png" alt="picture.png" /></span></P><P>&nbsp;</P><P>The actual URLs is more than that, so e.g.&nbsp;storage.googleapis.com/trafikkort-data/something/something/something.json</P><P>In the logs it seems as by allowing these two URLs above I am allowing other traffic to&nbsp;storage.googleapis.com/something/something as well, which is not what I want.</P><P>I have tried several ways of formatting and posts here and&nbsp;<SPAN>sk106623, but doesn't seem to get it right.</SPAN></P><P><SPAN>If anyone knows what it takes, it'd be much appreciated <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></SPAN></P> Thu, 02 May 2024 09:26:41 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/212909#M40471 JPR 2024-05-02T09:26:41Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/212931#M40474 <P>I would simply try *googleapis* or something like that, as long as you are sure you want to block everything from those sites. Maybe try that for one or group of users and test.</P> <P>Andy</P> <P>&nbsp;</P> Thu, 02 May 2024 12:03:59 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/212931#M40474 the_rock 2024-05-02T12:03:59Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213068#M40509 <P>Path after FQDN is not relevant/supported in my knowledge</P> <P>did you try regex?</P> <P>please take a look here too&nbsp;<A href="https://support.checkpoint.com/results/sk/sk174194" target="_blank" rel="noopener">https://support.checkpoint.com/results/sk/sk174194</A></P> <DIV id="gtx-trans" style="position: absolute; left: 91px; top: -22px;"> <DIV class="gtx-trans-icon">&nbsp;</DIV> </DIV> Fri, 03 May 2024 12:50:30 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213068#M40509 CheckPointerXL 2024-05-03T12:50:30Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213069#M40510 <P>Not sure how relevant it is, but Im sure it is supported.</P> Fri, 03 May 2024 12:50:16 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213069#M40510 the_rock 2024-05-03T12:50:16Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213073#M40511 <P>Forgot to ask, do you have ssl inspection enabled?</P> <P>Andy</P> Fri, 03 May 2024 12:57:07 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213073#M40511 the_rock 2024-05-03T12:57:07Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213099#M40514 <P>I'll have to look into that on Monday. Thanks though!</P> Fri, 03 May 2024 13:29:16 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213099#M40514 JPR 2024-05-03T13:29:16Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213100#M40515 <P>Yes, using HTTPS Inspection.</P> Fri, 03 May 2024 13:29:42 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213100#M40515 JPR 2024-05-03T13:29:42Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213102#M40516 <P>I'll have to look into that on Monday. Thanks!</P> Fri, 03 May 2024 13:31:26 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213102#M40516 JPR 2024-05-03T13:31:26Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213103#M40517 <P>In my experience, cause this might be easy to overlook, make sure its not bypassed in https inspection policy.&nbsp;</P> <P>Andy</P> Fri, 03 May 2024 13:31:36 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Blocking-sites-doesn-t-work-as-intended/m-p/213103#M40517 the_rock 2024-05-03T13:31:36Z