Block FreeFire Game in sophos X86

Hi khouloud frikha,

Thank you for reaching out to the Community! 

Could you please provide the game's name and configured web and application control policies to block that game? and log entries that show allowed traffic for the application download.

Thanks,

Hi khouloud frikha,

Thank you for reaching out to the Community! 

Could you please provide the game's name and configured web and application control policies to block that game? and log entries that show allowed traffic for the application download.

Thanks,

Hello,

The game's name is "Free Fire ". I blocked the categories of games using web filtring also application control but still, I can access this game.

How can I get the log of traffic allowed, please?

Do you want block users from downloading or playing the game in your network ?

It will be hard to block the user from downloading the game without doing TLS Decryption - even if you do, Google Play Store can't be decrypted without a MDM solution to import the CA.

If you want to block users from playing the game in your network, then I can download It later and try to see on what servers It communicates for you, or if It will be necessary to create a IPS signature.

Also, just to be sure, you're talking about this one ?

Thanks!

Thank you for your reply. in fact, I want to block playing.

For the IPS creation, can you guide me on how to create it?

thank you in advance

Good news, there's no need to create a custom IPS Signature.

So, in order to block Free Fire completely, first create a Application Filter which the action to Deny traffic to Free Fire;

And then in order to complete block the user from login to free fire, go to Web (On the Left Tab of the Admin Page), and inside URL Groups Add a new one like this:

1. freefiremobile-a.akamaihd.net
2. freefiremobile.com
3. login.common.freefiremobile.com
4. version.common.freefiremobile.com

After It, apply it on a Web Policy, like on this one: (To show URL Groups, you have to click on "Show Only" and then "View All".)

After It, you can check on the Log Viewer, in both "Application Filter" and "Web Filter" to see if the traffic is being blocked correctly; Here's an example on how It should look like.

Here's the Docs Files if you need any help on any of the above.

• How To block applications.
• How To Add a URL Group.
• How To use the Log Viewer.

Thanks!

Thank you !!