Netflix issue

[itassetbenilde]

Good day,

Just got off a meeting with one of our users. We have a standing policy wherein Netflix is blocked within the campus premises. We explicitly created a rule to block all banned applications right on top of the security policy stack, netflix amongst them. Rule had been in place for more than a year.

It was reported that users were still able to access netflix.com(splash page). Weird thing is, when we received the ticket and tested, netflix.com could no longer be accessed. User doesn't watch Netflix, so we've ruled out possible browser caching.

i already checked, nobody made any changes that could possibly affect Netflix access. The logs also show that netflix-base is being blocked, and i am getting a blank list when i search for 'app eq netflix'.

Sadly i cannot reproduce the behavior, as Netflix is being blocked elsewhere in our campuses.

Taking the ticket details as is, What other possibilities are there that Netflix could be allowed, yet not logged on the firewall? Am guessing that somehow, for a split second, the firewall may have failed to identify Netflix traffic.

Any ideas? For now, we've added .netflix.com/ and *.netflix.com/ into our URL filtering block list.  Thanks

[SutareMayur]

Hi @itassetbenilde 

Can you check the old timeframe logs when Netflix was allowed? Those logs would help to identify why it got allowed. There might be chances someone browse the URL only from web-browser and it matched the traffic in web-browser app category. I am just telling you possibility. So to confirm it, past allowed traffic logs would actually help here.