This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exclude "by application" for IPS and Web filtering? Is it possible? (Network visibility)

I want to be able to exclude the Steam client from the IPS since the IPS drastically slows down game downloads, but in the "exclusion" settings within the IPS there are only exclusion options for requests:

1. Coming from these source networks,

2. Using these services

3. Going to these destinations.

Steam has no way of manually specifying which port to download games from.

Since the UTM contains the Flow Monitor and can see Steam, I am wondering why there is no way to create IPS or Web Filtering rules for specific applications as long as flow monitor is enabled. 

If not, I will have to create a service definition for Steam based on the range of ports that Steam uses then add that service to the exclusions in the IPS.

UTM latest version, using URL filtering only, transparent mode.



This thread was automatically locked due to age.
Parents Reply
  • Yes, thank you. I tried that method but I noticed that Steam actually was using the 60,000 port range to download games. Steam also uses port 80 to download games too, so I won't be adding port 80 to any service definition.

    I will just have to tweak my rules until I get better speeds.

    However all of the IP addresses that Steam downloads from are "valve.net" domains. I'll continue to look for ways to create a definition for any IPs coming from "valve.net" as a source network. 

Children
No Data