How To Block The Spotify Music Streaming Service; Set Up Idp Profile On The Zywall/Usg - ZyXEL Communications ZyWALL 110 Handbook

3.9 How To Block the Spotify Music Streaming Service

This is an example of using a ZyWALL/USG IDP Profile to block DNS query packet. When the
Spotify software launches, it will send a DNS query for Spofity's public server. In this example, you
can create a custom IDP to block DNS query packet if this packet includes the Spotify signature.
Figure 186 ZyWALL/USG with Block the Spotify Service Example
Note: All network IP addresses and subnet masks are used as examples in this article.
Please replace them with your actual network IP addresses and subnet masks. This
example was tested using USG310 (Firmware Version: ZLD 4.13).

3.9.1 Set Up IDP Profile on the ZyWALL/USG

In the ZyWALL/USG, go to CONFIGURATION > UTM Profile > IDP > Custom Signatures >
1
Add Custom Signatures, configure a Name for you to identify the IDP Profile. Select medium
as the Severity level. Select all Platform. Select Policy Type to be Access-Control here to limit
access network resources such as servers.
Figure 187 CONFIGURATION > Security Policy > IDP > Custom Signatures > Add Custom
Signatures > Setup & Information
Scroll down to the Payload Options section, the type Spotify's software signature:
2
|73||70||6F||74||69||66||79|into the Content field. Click OK.
Chapter 3 Protect Your Network with UTM
ZyWALL/USG Series User's Guide
90