MR33 - Group Policy blocking entire URL domain?

[Dmel74]

So I have setup a group policy for my children not to be able to access things like reddit.com, redd.it, youtube.com and several others (in addition to some of the built-in groups of things like GAMING).

What I have noticed lately is that I still see traffic from time to time for things like 'v.redd.it' and 'preview.redd.it'

I work as a network engineer, so I get that sometimes a firewall needs exact FQDN to block. Is that what is required for Meraki L7 policy? I need to put each possible subdomain to block, not just the 'top level' domain?

I realized just before I wrote this that I can chose YOUTUBE specifically from the 'VIDEO & MUSIC' category so that is covered now. But there are many more specific URLs that are not covered.

[Sushil]

It seems redd.it, v.redd.it etc redirects to reddit.com. So, if you block HTTP hostname www.reddit.com, it should be able to block all urls.

For example - If i block amazon.com, it will block amazon.com, aws.amazon.com etc. But not amazon.com.au.

If you have MX firewall, you can use content filtering to block URL using patterns as well.

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering#Patter...

[PhilipDAth]

I think you would need to block reddit.com rather than www.reddit.com.