Description

 

This article explains how to block URLs with an uncategorized category.

 

Symptoms

Since the below url falls under Uncategorized, we won't be able to block this url with application name or category.

[email protected]# lookup application by-domain ajio.com
✔ Looking up application identification...

================== ========== ===============
 Application Name   Category   Subcategory
================== ========== ===============
 N/A                Uncategorized   Uncategorized

 

Solution

 

In this situation the user can use the domain-name option to block the urls.

 

service internet
   address 0.0.0.0/0
   access tenant_lan allow
exit

service block-quic #App-Id only works only on TCP, hence we need to force the client to fallback from UDP to TCP.
  address 0.0.0.0/0
  transport udp
    start-port 443
  exit
  access tenant_lan block
exit

service allow.internet
  application-name YouTube
  application-name WhatsApp
  ..
  access tenant_lan allow
exit

service block.internet
  category Adult
  category Weapons
  category SocialMedia
  category StreamingMedia
  ..
  access-policy tenant_lan block
exit

service block_domain.internet
  domain-name ajio.com
  ..
  access-policy tenant_lan block
exit

router
  application-identification
    mode all
    web-filtering enabled true
  exit
exit

 

Modification History

2025-05-25 : Article Created