Firewall - time based access for host groups

I tried it for testing purposes:

  1. creating time role “ever” 00:00-23:59
  2. creating FW-Role for a dedicated client
    image

… Client still has full access to Youtube

ps.: an respected:

Firewall rules using DPI services are generated inside the mangle table, for this reason such rules have some limitations:

  • reject action is not supported, use drop to block traffic