Overview
Whether to discard (block) traffic to unwanted sites or to ignore traffic that should not be shaped, both can be done with Exinda as long as the traffic is known (by IP or by application).
This article provides instruction to achieve that.
Note: It should be noted that the Exinda appliance is not a firewall, and it cannot sustain the type of filtering or access control that a dedicated firewall can handle.
Prerequisites
- Admin access to the Exinda WebUI
- Admin access to the Exinda CLI
Solution
- First, you need to create an object that your policy will use for classification:
Note: In ExOS v7.4 or later you can Create a FQDN Based Network Object
- After creating the object or application, you need to Create a discard (block) or ignore Policy depending on your intent and apply it to the current Optimizer configuration.
Note: In addition, you can Add the policy to a virtual circuit
Testing
If you configured a Discard (blocking) policy, the sites/applications part of that policy should not be accessible anymore.
If you configured an Ignore policy, the traffic pertaining to the sites/applications part of that policy should be ignored from traffic shaping.