How can strict mail-server with url-category

[PattarachaiMFEC]

Hi expert,

I would like to allow just mail-server strict to the URL with service SMTP only it can use the URL-category ? or URL-filtering without the service such as HTTP,https,http-proxy   

Thank you

[SutareMayur · Accepted solution]

@PattarachaiMFECYou can create custom URL category which will include the email domain (probably wildcard one) / if it is specific FQDN, then you can add FQDN type of object and restrict traffic for custom URL category and/or FQDN object to specific ports/apps like SMTP.

Hope it helps!

[Remo]

In order to use a custom URL category to restrict smtp traffic it need to be smtps. This way the firewall is able to filter on the certificate used for the connection. If you are using unencrypted smtp, you have to use fqdn objects to restrict the connection as there the firewall will not see anything that could be used for URL filtering.