Zone Based Firewall Configuration Example

Hi Rene,

I’m wanting to include a section in my ZBPF to deny access to certain URLs. Some websites are suggesting to use a parameter-map type regex whilst others are suggesting using a class-map match-any.


!
parameter-map type regex url-blacklist-pmap
 pattern *.example.com

vs
 
class-map match-any URL_BLOCK
 match protocol http host "example.com"
!

I am interested in doing this to try and block various telemetry attempts by 3rd parties as the hosts file is often quite useless at this. Some use URLs hardcoded with their phone home addresses inside .DLLs to circumvent detection. Can you offer any suggestions using the correct syntax?

Matt.