Not able to block facebook and other social Networks

Oh god I forgot to say that some categories on the same Policy do work correctly like Sexually Explicit, it does work well so it seems that my configuration is ok, but I find it really weird that it is not working

Hi,

first thing, please upgrade to v18.5.4. If you want to use https which you will need to block some sites you will need to install the XG CA at the very minimum on your user devices.

Ian

Hi,

Please block the facebook website in the application filter what you assigned and it will solve your problem.

I tried with the Application control didnt work, Selected everything that had Facebook on the name didnt work. So I guess will have to wait do the upgrade and retry.

Thanks a lot appreciate your help and guidance

Upgraded the firwmare not with stuck without being able to log on to the admin portal.

community.sophos.com/.../urgent-help-need-stuck-on-compulsory-password-reset-after-upgrade

Upgraded to Version 19 still nothing it doesnt block Facebook

Created a Application Filter including everything that mentioned Facebook

Applied the Application Policy to the Rule, I can see all the traffic hitting correctly Rule 13 which has the BlockApplication (Facebook)

but Still doesnt block anything Facebook website opens without any issue.

Could you share the results using the Policy Test Tool (under Diagnostics) with the test PC/user you are using?

Just do Packet Capture for that ip address. Please check whether the traffic passing through the assigned firewall rule?

Hi,

 a couple of suggestions for your rule,

1/. you need to enable block QUIC

2/. You are using the Proxy even though you don't have the box ticked because you are scanning http and decrypted https.

3/. the DPI does not in its current version scan UDP traffic

4/. change the IPS to LAN to WAN, I found that improved my detection of applications etc I want to block

5/. if you plan to use the DPI then you need to review the default exceptions in the SSL/TLS policies.

6/. you will also need to decrypt HTTPS which means you will need to install the XG CA on the end user devices.

Ian

Thanks a lot rfcat the Bloc Quic protocol helped a lot