Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
kurt
New Contributor

How can I traffic shape Internet radio over UDP ?

Hello,

 

As the subject says ...

How can I traffic shape Internet Radio that go's over UDP ports.

Blocking or shaping the traffic over http and https with the webfiltering/dns/Application options is not a problem.

unfortunately UDP traffic used by Internet Radio streaming is not detected.

Can someone help ? Users are sucking up our bandwidth due to the UDP usage for Internet Radio.

 

Regards

 

1 REPLY 1
Dave_Hall
Honored Contributor

udp for the most part is a connectionless protocol - so it's likely unrealistic to try to traffic shape it.  Perhaps the best option in your case is to identify the site or sites that those users are streaming content from and block access to those sites, and if need be you can always use local rating overrides to reclassify a site to a category that you do know is blocked.  Alternately, you can always craft url filters to block such content.  Or if you really want to lock down or control/restrict access is to craft a "catchall" policy that blocks outbound access via non-standard udp/tcp ports.

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
Labels
Top Kudoed Authors