topic Re: Cannot block site viooz.co in General Topics

Cannot block site viooz.co

MemphisBrothers — Tue, 07 May 2013 18:48:53 GMT

This is an illegal movie site that shows anything even stolen movies for free. The IP address is 5.199.170.104 I have tried blocking the site name, the ip. Nothing works. It's almost like the site is an anonymizer itself. I would love any help at all. I need to totally block this site from our network.

I have redundant PA-500s.

Re: Cannot block site viooz.co

MemphisBrothers — Tue, 07 May 2013 19:03:46 GMT

Brightcloud has it as an entertainment category. It should also be streaming media and illegal. I have requested a change.

Re: Cannot block site viooz.co

zarina — Tue, 07 May 2013 21:07:02 GMT

You can add it to the URL block list:

viooz.co/

*.viooz.co/*

and apply this profile to the security policy.

Re: Cannot block site viooz.co

MemphisBrothers — Wed, 08 May 2013 13:47:57 GMT

Dude, really. You don't think I have tried that? It does not work. I did find a clever way to stop it.

Go to Objects -> Regions. Add a new one and name it whatever (I called it Viooz_Lithuania for testing). Put 5.199.170.104 as the IP address for the region.

Then, go to Policies -> Security and create a new security policy. I named it Block_Viooz. The rule looks like this:

Source Zone: Trust (LAN)
Source Address: Any
Source User: Any
HIP Profile: Any

Destination Zone: Untrust (ISP)
Destination Address: choose the Region you created (Viooz_Lithuania for me)
Destination Application: Any
Destination Service: Any

Action: Deny
Profile: None

I set this rule near the top of the list, and then when trying to browse to http://viooz.co, I got page cannot be displayed, and a Deny entry logged in my Traffic Log.

Re: Cannot block site viooz.co

zarina — Wed, 08 May 2013 16:23:51 GMT

Using URL block list will work too. I tested this in the lab and works fine.

Re: Cannot block site viooz.co

MemphisBrothers — Wed, 08 May 2013 17:22:49 GMT

All due respect to you, it may work in your lab. But that is the first way we tested it in our real world environment and it did not stop students from accessing the site. All recommendations are appreciated.