topic Re: Allow only Zoom for a subset of machines in General Topics

Allow only Zoom for a subset of machines

froche — Mon, 30 Aug 2021 22:26:10 GMT

I want to lock down Internet access for some machines to just allow them to use Zoom, but using the App-ID means I have to allow SSL and STUN too and I don't want that as that opens up a ton of other sites, Anyone have any suggestions? Maybe a URL filter allowing just the *zoom.us domain?

Re: Allow only Zoom for a subset of machines

BPry — Tue, 31 Aug 2021 03:34:50 GMT

@froche,

You could setup a custom URL category to match *.zoom.us traffic, but be mindful that you need to allow enough traffic to pass to identify the destination domain. Zoom also publishes their IP ranges at https://assets.zoom.us/docs/ipranges/ZoomMeetings.txt that you could either manually input or simply setup a MineMeld miner and use it in an EDL if you have MineMeld setup.

Re: Allow only Zoom for a subset of machines

froche — Tue, 31 Aug 2021 11:55:58 GMT

I setup my custom URL category for Zoom using the *.zoom.us domain and it seems to be working.