This article describes how to configure firewall rule to block traffic for shopping category

Prerequisites

1. Versa headend is  installed and functional.
2. Make sure NGFW (Next Generation Firewall ) services have enabled on the Versa FlexVNF CPE
3. To add NGFW service on Versa FlexVNF click here

Configuration

1. Login into the Versa Director and navigate to the Configuration >Templates
2. Edit the Template associated with the Versa FlexVNF by clicking it

3. On the Versa FlexVNF CPE template navigate to Configuration > Services > Next Gen Firewall > Security > Profiles > click on URL Filtering

4. Click + to create new URL filtering profile
5. Edit URL Filter will pop-up. Fill in the details:

• Provide a Name to the Profile
• Click on Category Based Action
• Click + to create Category Based Action

6. Add Category Based Action will pop up fill in the details

• Provide name of the action
• Select Action as block
• In the section Predefined Categories click on + and select the shopping category in the Predefined Category list as shown in below image

7. Click ok

8. And Click ok

9. Navigate to Security > Policies and click on + to add new Policy (if default-policy is not present)
10. Click on Rules

11. Click on + to add a rule
12. Pop-up window is opened to Add Rule

13. In the Add Rule window in the General tab provide the name for the rule (i.e Block_Shopping_Sites)

14. Then click on Enforce tab. Rest of the tabs (Source/Destination, Headers/Schedule, Applications/URL, users/Groups are not required to be edited in this use case)
15. In the Actions section select Apply Security Profile
16. Select URL Filtering option and select from Drop-Down the URL Filtering Profile that we created earlier in this article.

17. Click OK to complete the configuration.
18. Since we have done the configuration in Template mode, commit the template to the branch/branches where you want to apply this rule.

Validation

The user will not be allowed to access the Facebook URL and Error is displayed on browser