Cannot block site viooz.co

[MemphisBrothers]

This is an illegal movie site that shows anything even stolen movies for free.   The IP address is 5.199.170.104  I have tried blocking the site name, the ip.  Nothing works.  It's almost like the site is an anonymizer itself.  I would love any help at all.  I need to totally block this site from our network.

I have redundant PA-500s. 

[MemphisBrothers]

Brightcloud has it as an entertainment category.  It should also be streaming media and illegal.  I have requested a change. 

[zarina]

You can add it to the URL block list:

viooz.co/

*.viooz.co/*

and apply this profile to the security policy.

[MemphisBrothers · Accepted solution]

Dude, really.  You don't think I have tried that?  It does not work.  I did find a clever way to stop it.

Go to Objects -> Regions. Add a new one and name it whatever (I called it Viooz_Lithuania for testing). Put 5.199.170.104 as the IP address for the region.

Then, go to Policies -> Security and create a new security policy. I named it Block_Viooz. The rule looks like this:

Source Zone: Trust (LAN)
Source Address: Any
Source User: Any
HIP Profile: Any

Destination Zone: Untrust (ISP)
Destination Address: choose the Region you created (Viooz_Lithuania for me)
Destination Application: Any
Destination Service: Any

Action: Deny
Profile: None

I set this rule near the top of the list, and then when trying to browse to http://viooz.co, I got page cannot be displayed, and a Deny entry logged in my Traffic Log.

[zarina]

Using URL block list will work too. I tested this in the lab and works fine.

[MemphisBrothers]

All due respect to you, it may work in your lab.  But that is the first way we tested it in our real world environment and it did not stop students from accessing the site.  All recommendations are appreciated.