NGAF/URL Filtering 10

hi everyone
i have NGAF connected with LDAP i want to ban social media and other sites for specific user .
i have made network policy and security template but the problem is that the network policy is ignored and only application policy is taking action and there's no place to choose a security template inside application policy
please help.
thank you

Check if the policy is above all other rules that could possible allow the Social sites to all.

Hi, it is a strange behaviour, as if i put an application control policy on top that block traffic recognized as social media, i expect that this policy blocks traffic for the client that match the policy. Double check your policy and perform a precise traffic analysis on system -> troubleshooting to find which policies match your client when accessing to social media sites

Makesure the Network Policy has the correct priority and  it's configured correctly under Web Security/URL Filtering settings.

If you want to block social media, is is recommended to use application policy ,

By url filtering you can not achieve what you want, because every site has multiply urls , sub urls and Pointing urls (linking urls)
user may open the desired URLs by multiply ways

Alternative Option: URL Filter
If managing via application control proves complex, consider using URL Filtering:

1.Navigate to Security > Web Filter.
2.Create a new URL filtering policy targeting specific categories or custom URLs (social media).
3.Apply the policy to the desired LDAP user or group.

Change to network object then policy works normally;

Check authentication policy found that authentication zone didn't select any zone;

Select the zone that uses AD SSO authentication then policy starts working.

Any update for global exclusion in SANGFOR NGFW 8.0.95??