How to block all access to an application (such as YouTube, Facebook), and only allow specific IP range or Users to access these application?

You can do this via the Sinefa Traffic Shaping Rules. You can find out more details on traffic shaping via this guide – How to Setup Traffic Shaping

The Traffic shaping policies is applied in the following order:

  • Ignore - Traffic Shaping rules do not get applied to this application/definition
  • Block - Once applied, End users will be unable to use what's defined (i.e. Facebook, Youtube, etc.)
  • Shape - Most specific subnet address (e.g. 192.168.0.124/32)
  • Shape - Least specific subnet address (e.g. 192.168.0.0/16)
  • Shape - Application (e.g. Facebook)
  • Shape - Application Group (e.g. "All Software Updates")
  • Catch All (i.e. All Other Traffic)

Take for example, if you wish to block all traffic to YouTube and only allow IP segment 10.10.15.0/24 to be able to view YouTube. You can do via the following steps

  1. Set a Shaping Rule to block YouTube traffic.
  2. Set a 2nd Shaping Rule to Ignore YouTube for 10.10.15.0/24
  3. Now only users from 10.10.15.0/24 is able to access YouTube.