[SOLVED] Firewall Block Policy

[pbolduc]

I am trying to create an outbound Firewall Block policy from the LAN interface to the WAN. I would like to prevent attempts from the LAN to access public SMB servers. My firewall policy is as follows:

Proto: IPv4 * Source: 192.168.1.0/24 Port: * Destination: WAN Address Port: File & Printer Sharing Port Group Gateway: *

This policy doesn't work even when i change the destination: WAN Address to Wan Net. However, if I make the Destination: "Any" it works but then it blocks access to my remote IPSec Networks as well. Any help would be much appreciated. I still want the LAN users to be able to access File Sharing services on different IPSec subnets.

Regards,

[kyferez]

Add a rule above the one you created to allow access to the IPsec subnets for SMB.

[pbolduc]

 Thanks so much, this worked! For some reason I was hitting a wall! =)