Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 10 replies
  • Answers 2 answers
  • Subscribers 29 subscribers
  • Views 1821 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Not able to block facebook and other social Networks

Ronnet Patino

XG125 (SFOS 17.5.12 MR-12) I created URL Group and Included facebook.com It didnt work it is applied with a Policy but the same policy does block other domains on the same list, after that tried with creating a Category same result doesnt block facebook then tried and active HTTP and HTTPS Inspection same result.

I have a Rule to test the policy applied to just one Host the rule is getting hit correctly I see it on the Log Viewer #17 the rule I created, I had to disable HTTPS inspection it was blocking almost any website almos any category which are not included Banks and News where generating errors blocking certains parts of the websites.



This thread was automatically locked due to age.

Top Replies

  • in reply to Ronnet Patino +3 verified

    Hi,

     a couple of suggestions for your rule,

    1/. you need to enable block QUIC

    2/. You are using the Proxy even though you don't have the box ticked because you are scanning http and decrypted https.

    3/. the DPI does not in its current version scan UDP traffic

    4/. change the IPS to LAN to WAN, I found that improved my detection of applications etc I want to block

    5/. if you plan to use the DPI then you need to review the default exceptions in the SSL/TLS policies.

    6/. you will also need to decrypt HTTPS which means you will need to install the XG CA on the end user devices.

    Ian

    Jump to answer
Parents Reply Children