i'm out on the road at mo and in scarborough until saturday so can't give it a shot. i'll try when i get back if you can wait.

That would great and would certainly be appreciated.

If you need anything else from me, please let me know

Theoretically what louis-m suggested should work. Unfortunately the firewall in the 2820 is currently broken when it comes to any kind of chaining of rules.

I've mentioned it previously in these forums, and it's been broken for a long time (and several firmware revisions) so i'm not holding out much hope for a fix any time soon.

unfortunetely, after testing, i'm inclined to agree with middling.
i could'nt get the default web content filter going.

although, it can categorise sites, it didn't perform the block.
a simple test to confirm.....
1. csm>web content filter> create rule to block all categories eg "block all"
2. whilst in there, test eg hotmail, result=webmail
3. firewall>general setup> action=block, web content filter= above created rule eg "block all"

result = everything still goes out (even though anything categorised above should be blocked)

Well thats put a bit of a downer on my purchase since it was the filtering that i bought it.

I have emailed support to see what they suggest, but really must thank you for time.

You have really helped me understand the kit, and appreciate you taking time to test theory.

If i can feedback from support, i will let you know

louis-m,

If firewall>generalsetup> Filter action=block then that means the default rule is to block all traffic. This is before we consider the web content filter. If devices are still able to access the internet it would suggest that there is an IP filter rule with action "pass", probably in the default data filter.

This pass rule means that the default web content filter rule does not apply. Find the pass rule in the IP filter and set the desired Web Content Filter profile.

The important thing to know is that IM Filter, Web Content Filter and URL Content Filter are only processed at the exit of the IP filter.

The actual profile that is processed depends on the IP filter rule on which the IP filter exits.

i.e with a Pass Immediately or Pass if no further match action (if there aren't any other matches)