I try to block buscaid.com and the clients still bypassing this rules
Does your web traffic go thru a proxy?
is the policy taken by the client?
Is NTP component installed on client?
No proxy and the client have ntp i can block google but buscaid.com no
Out of curiosity, remove the IP address and only block by domain name. See what happens.
doesnt work !
this same problem happen with twitter.com
solution
http://service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/9c561a4628b3c9a44925747f007b19cd?OpenDocument
So what was the problem? Doesn't work with firewall but does with custom IPS?
yeah the custom IPS works but the firewall policy dont
would seem to be a bug than, perhaps it needs further investigation.