How to ban UDP ports for Assumed user?

[nhpok]

I want to ban UDP ports greater than 1024 for Uers01(Assumed user):

(ENS prots security settting:LANconnections to Internet, TCP/UDP default :allow)

ENS－policies－User01- default rights:are ignored —Advanced-specify which requests this recipient has rights for:sever port number less than 1024

it can ban TCP ports greater than 1024 for Uers01,but not UDP ports,WHY???

[genie]

The problem with UDP port processing is that traffic through them is not reported unless the destination port is less than 1024 or connection stays alive for longer than 30 sec - and even if the connection is closed, it can be "re-established" instantly because UDP does not require connection establishment phase.

[nhpok]

it means I can not ban UDP ports fot a assumed user?!

[genie]

You cannot in the current version - we can supply you the the driver version which reports all UDP traffic straight away so you can use policies to block it, but since the engine blocks traffic _after_ a UDP packet has been sent, it will block the inbound packet then - so you can block an inbound UDP stream, but not the outbound.