We have defined a bunch of about 50 Application Control rules, all of which are blocking rules and all of them have logging enabled. Most of these rules are intended to block traffic from Advertisement networks, file sharing hosters and other suspicious or useless applications. The rules have been set active.
I would expect to see one of these rules triggered in the Live Protocol when invoking a website which contains links to one of the blocked Advertisement networks. We also habe blocked a protocol/application called mck-ipvip.
When starting flow monitor on the external interface of the UTM9 System I would expect that this traffic is effectively blocked. But instead I see traffic that should be blocked by Application Control ist still being passed through to the external interface and these Applications are still sending quite signifcant amounts of web traffic.
Is there anything significant that I may have missed in configuring Application Control?
Kind Regards,
Axel
This thread was automatically locked due to age.
