I am using a routerBoard 750, it's only task at the moment is to block iOS & Android, Windows & Mac OS updates as we are on satellite a vsat link. I have played with the layer 7 rules to block but I can't get the simplest rule to block anything.

Do I have to enable the layer 7 stuff globally some place to make my rules work?

Could anybody supply me a example that is known to work so I can test my router and hopefully understand what's going on.

Please help, these devices are slaughtering my bandwidth and costing me a fortune!