Forefront TMG 2010 version 7.0.9193.500

I have a rule on the TMG, called "Block Social Networks". It's first of all rules in "Web Access" applied to "Internet Standard" users' group, blocking a set of URL (called "Social Networks").

However it blocks only part of this set (Facebook, for example), but other part is allowed (Twitter, for example), i.e. rule works only half.

And ideas why?

Hi,

policy rules must match the traffic. If you use URL set / Domain name sets you must make sure that DNS is working, and URL sets must follow specific conditions:
http://technet.microsoft.com/en-us/library/cc302531.aspx

Hi,

Thank you for your post here.

As Marc mentioned, you need to strictly define these URL, if there is any a little difference, it may do not work.

Best Regards

Quan Gu

Unfortunately it was just wrong group membership test configuration. I made log off from one computer (there was two) and noticed that there were two different users instead of one, so the problem was one user allowed to view and other don't.

Now everything is fine.

Since this topic is about how I overlooked two users may I delete it? It has no practical value. I feel so foolishly