topic Re: Specific URL block or allow in Spark Firewall (SMB)

Specific URL block or allow

ANANTADSULE — Fri, 20 Jun 2025 11:27:38 GMT

Dear All,
Device details as follows.
1550 Appliance
R81.10.17 (996004620)

Locally Managed

Firewall is set to standard firewall mode with HTTPS inspection and App,URL filterling enabled and I'm trying to block specific url using manual rule but not be able to block it and it's accesible.
Access policy structure as follows.
RUle 1,2,3,4 are SMP cloud rules for other source and destination.'

Rule No 5(Top Manual rule)
Source-192.168.1.97(SGNSB)
Destination-Internet
Application/Services-JIO(tried both-https://*.jio.com and https://www.jio.com)
Action-Block
Log-Log
Rule 6 is for other source and destination working as expected.
Rule 7,8,9 are default rule created by Checkpoint for Standard firewall mode(Untouched)

Please help me to understand the access policy workflow and exact issue with the rule.

Approach is to allow specific urls/applications only.
screenshots attached herewith for your reference.

Re: Specific URL block or allow

the_rock — Fri, 20 Jun 2025 14:09:24 GMT

Can you send the log you see about it?

Andy

Re: Specific URL block or allow

Chris_Atkinson — Fri, 20 Jun 2025 14:20:20 GMT

Is it accessible from different browser flavours, is it still accessible on successive / subsequent attempts?

QUIC Protocol & URL Categorization mode - Background vs Hold could be potential factors.

Re: Specific URL block or allow

ANANTADSULE — Sat, 21 Jun 2025 05:02:09 GMT

I've updated same rule with following changes and now it's reacting differently.

added two urls- 1)*jio.com getting proper block message now 2)*rbi.org.in getting "This site can’t be reached

" instead of block message.

Screenshot attached for reference. (JIO.jpeg,RBI.jpeg)

Re: Specific URL block or allow

the_rock — Mon, 23 Jun 2025 11:02:52 GMT

So its working partially now?

Andy

Re: Specific URL block or allow

ANANTADSULE — Tue, 24 Jun 2025 05:14:01 GMT

Yes

Re: Specific URL block or allow

ANANTADSULE — Tue, 24 Jun 2025 09:09:25 GMT

Have a look at logs.

Same rule but two different action Block and Reject.

I have removed the financial category from SSL bypass,but still same issue if there is any concern.

Re: Specific URL block or allow

the_rock — Tue, 24 Jun 2025 10:27:40 GMT

I would check with TAC support on this.

Andy