The machine is a DFL-2560G.
Here is the scenario. I have defined three sets of IPs (High: 10.10.100.1-10.10.100.100), (Med: 10.10.100.101-10.10.100.254), and (Low:10.10.101.1-10.10.103.245) and created IP rules and Pipe Rules for each each Group.
IP-Rules
1-Group High: Action=NAT; SrcInt=lan1; DestInt=Wan1; DestNet=all-nets; Service=all_services
2-Group Med: Action=NAT; SrcInt=lan1; DestInt=Wan1; DestNet=all-nets; Service=http-outbound-wcf
3-Group Low: Action=NAT; SrcInt=lan1; DestInt=Wan1; DestNet=all-nets; Service=all_services
http-outbound-wcf uses an ALG that has WCF enabled and sites like facebook, youtube, etc. blocked. (some know to use https to get around the blocking and am working on a solution to that)
Pipes
Standard-out: Grouping=SourceIP; Network size=0; TotalBandwidth Limit=10000
There is only one Pipe Rule defined and enabled on the High Group, the others are disabled as part of troubleshooting the following problem.
Whenever I use the http-outbound-wcf service on Med Group all browsing comes to a near full stop. Filtering works like a charm. Take it off by using all_services and all is back to normal but no filtering. Is there something else that is preconfigured that may cause this behavior? Or, perhaps I have something missing from the configuration?
Thanks in advance for your assistance.