I know how to do this in UTM and there are tons of threads on it as well... But how do you do this in XG? I want to block all ads but allow just these 2. The amazon android app will even crash with ad blocking on. Any good way to do this? I have tried RegEx and skipped policy checks but that doesn't seem to be working. Thanks!
That's a quite simple task
First create a URL Group containing the domanis to allow
Afterwards create a User Activity containing your previously created URL Group
And finally let's assume the simple base ruleset (Web Policy) below. Default Action in the bottom is Allow, on top of it is a rule blocking some categories for everyone (spyware, malicious etc.), above of that another policy warning specific categories for everyone (shopping, etc.), and finally you can set another rule on top, which allows your previously created user activity for anyone or specific users. As the ruleset is sequentially worked from top to bottom (and you can sort the rules too, simply move them around to sort the rule order. Not all people are aware of this ;o)) this solves your point.
And finally add the web policy into your according firewall rule. Tadaaaaa......
That's a quite simple task
First create a URL Group containing the domanis to allow
Afterwards create a User Activity containing your previously created URL Group
And finally let's assume the simple base ruleset (Web Policy) below. Default Action in the bottom is Allow, on top of it is a rule blocking some categories for everyone (spyware, malicious etc.), above of that another policy warning specific categories for everyone (shopping, etc.), and finally you can set another rule on top, which allows your previously created user activity for anyone or specific users. As the ruleset is sequentially worked from top to bottom (and you can sort the rules too, simply move them around to sort the rule order. Not all people are aware of this ;o)) this solves your point.
And finally add the web policy into your according firewall rule. Tadaaaaa......
