XG Firewall and Netflix

Question

I have recently changed my home network from a SG VM to XG VM running on ESXi 
 
 I am getting errors when running Netflix via Apple TV 
 
 To try get around this, I created a new firewall policy as follows: 
 
 Rule Name: Bypass Web 
 Source Zones: LAN 
 Source Networks and Devices: Bypass MAC's (with a MAC List with my ATV's in there) 
 Destination Zones: WAN 
 Destination Network: Any 
 Services: Any 
 Match known users: Unchecked 
 All Malware Scanning: Unchecked 
 Advanced:
 
 Intrusion Prevention: None 
 Traffic Shaping Policy: None 
 Web Policy: None 
 Application Control: None 
 Apply Web Category based Traffic Shaping Policy: Unchecked 
 Apply Application based Traffic Shaping Policy: Unchecked 
 Rewrite source address (Masquerading): Checked

Even in the firewall log I get all green:

What am I doing wrong? 
 
 Thanks

Ashen1 · Accepted Answer

hi daniel, 
 
 I can see that the info didn't work, thanks for the feedback, thus kindly try creating a firewall like this:

and create a clientless user for the specific IP range that would access netflix. 
 
 This did the trick for us, kindly let us know how it goes for you. 
 
 regards, 
 
 Rap

Ashen1 · Answer

hi Daniel, 
 
 kindly edit the destination network, your current setting is "any" it seems all outbound traffic will pass through this rule and supersede bottom firewall policies, 
 
 hence, put the ip address of netflix in the destination network or fqdn instead of any. 
 
 let us know how it goes, 
 
 regards 
 
 Rap

Aditya Patel · Answer

Hi All, 
 Have updated the Netflix list and also check the Drop packets if any via command. 
 console drop 'host <Src Address> 
 ^https?://([A-Za-z0-9.-]*\.)?ne?t?fli?x(img|ext|video)?\.(com|net)/ ^http?://[A-Za-z0-9.-]*netflix.com/ ^http?://[A-Za-z0-9.-]*nflximg.com/ ^https?://([A-Za-z0-9.-]*\.)?nflximg\.com\.?/ ^https?://([A-Za-z0-9.-]*\.)?nflxvideo\.net\.?/ ^https?://([A-Za-z0-9.-]*\.)?netflix\.com/ ^http?://([A-Za-z0-9.-]*\.)?netflix-*.vo.llnwd.net/.* ^https?://secure\.netflix\.com/* ^https?://uiboot\.netflix\.com/* ^http?://23.246.[0-63].* ^http?://37.77.1(8[4-9])|(9[0-1])].* ^http?://45.57.([0-1][0-1][0-9])|(12[0-7]).* ^http?://64.120.(12[8-9])|(1[3-9][0-9])|(2[0-4][0-9])|(25[0-5]).* ^http?://66.197.(12[8-9])|(1[3-9][0-9])|(2[0-4][0-9])|(25[0-5]).* ^http?://108.175.(3[2-5,8,9])|(4[0-4,6,7]).* ^http?://185.2.22[0-3].* ^http?://185.9.(188)|(19[0-1]).* ^http?://192.173.(6[4-9])|([7-9][0-9])|(10[0-9])|(11[0-7]).* ^http?://198.38.(9[6-9])|(10[2-3,8-9])|(11[0-9])|(12[0-5]).* ^http?://198.45.(4[8-9])|(5[2-8])|(6[1-3]).*