Hi newbie to Drayteks :oops: , I have a Vigor 2926.

I want to block ALL internet traffic for a RANGE of IP addresses on my LAN, except their ability to get the latest virus definitions from Avast.
For all other IP addresses on the LAN outside of this range I want no restrictions on Internet browsing etc.

One of the challenges as I see it, is the fact Avast/AVG publishes a long list of potential URLS they could use to get the Definitions.

Could someone point me in the right direction please?

Thanks in advance

Anyone?

https://kb.support.business.avast.com/GetPublicArticle?title=Avast-Business-Management-Console-Setup-Guide#A1

This may help

You can use the Route Policy as a semi firewall to do this. The Route Policy rules can have hostnames set up and you can set those to go through WANs as normal. So you can set up your required hostnames to go through WAN1 (and failover etc).

Then you'd have a rule after that applying to those PCs and all outbound traffic, you can point that to a non-existing gateway on the LAN.