This article describes how to configure firewall rule using URL Filtering to block certain websites (criminal/pornography)

Prerequisites

1. Versa Director installed and configured.
2. NGFW (Next Generation Firewall ) services should be enabled on the Versa FlexVNF CPE
3. To add NGFW service on Versa FlexVNF click here

Configuration

1. Login into the Versa Director and navigate to the Configuration >Templates
2. Edit the Template associated with the Versa FlexVNF CPE by clicking on it

3. On the branch template navigate to Configuration > Services > Next Gen Firewall > Security > Profiles > click on URL Filtering

4. Click on + to create new URL filtering profile
5. Edit URL Filter window will pop-up

• Provide a Name to the Profile
• Click on Category Based Action
• Click + to create Category Based Action

6. Add Category Based Action will pop up fill in the details

• Provide a name to the action
• Select Action as block
• In the section Predefined Categories click on + and select the list of pornography and criminal site categories in the Predefined Category list as shown in below image

7. Click ok 

8. And Click ok

9. Navigate to Security > Policies and click on + to add new Policy (if default-policy is not present)
10. Click on Rules

11. Click on + to add a new rule
12. Pop-up window is opened to Add Rule 

13. In the Add Rule window in the General tab provide the name for the rule

14. Then click on Enforce tab. Rest of the tabs (Source/Destination, Headers/Schedule, Applications/URL, users/Groups are not required to be edited in this use case)
15. In the Actions section select Apply Security Profile
16. Select URL Filtering option and select from Drop-Down the URL Filtering Profile which we created earlier in this article.

17. Click OK to complete the configuration.
18. Since we have done the configuration in Template mode, commit the template to the branch/branches where you want to apply this rule.