Blocking Dating Sites

[Dutch9]

I am trying to block Dating sites from a specific SSID.  

I put the website in the Layer 7 Firewall rules.  I added 5 different dating websites.  They were still able to get to those sites after I added them to the rules.

This customer doesn't have a Meraki firewall, just AP's and switches.  

Any ideas?

[PhilipDAth]

The rules don't apply to existing TCP connections.  If a new user comes along does it get blocked?

Also, where are the DNS servers being used located?

Were you blocking a category or matching DNS host names?

[Dutch9]

OH!  Only applies to new users.  HUM...ok.  I will have to test that.  There are employees using the 'employee' network and were 'caught' using dating websites.  Management wants all dating sites blocked.

I was using DNS host names, aka eharmony.com, match.com, farmersonly.com, etc.   I didn't see a 'dating' category in the drop down list.

DNS is being used on the DC.