Question : Vigor 2820: Block access to Internet.

At our Branch Offices, where on the 2820 is the easiest way to stop Users accessing the Internet? I have VPN set up to HQ, but don't want branch Users to access the Internet.

Answer : Vigor 2820: Block access to Internet.

Instead of creating this as a seperate rule, try puting it within the default data filter rule (set 2) and then putting it as filter rule 2. After various conversations with Draytek support they stated that this was the prefered area to put any traffic rules. It may also be worthwhile looking at the following webpage as I always found this helpful for when I created the SMTP rules http://www.draytek.co.uk/support/kb_vigor_filtering.html it is based on older technology, but the principal is the same. From what you describe though it sounds as though the only thing wrong is the rule placement.