APPLICATION CONTROL : FACEBOOK POLICY IS NOT WORKING

kunkka,

in order to allow/block micro-apps, you need to:

• enable decrypt and scan on the firewall rule where the Application is applied
• make sure micro-app scanning is enabled: system application_classification microapp-discovery show

Regards

Hi Sir lferrara,

Good Day

Thank you for your professional support.

I already perform your advise, but then something weird happen I think I missed some configurations that's why www.facebook.com was blocked by my browser.! 

Can you assist me again in this matter?

Please find attached screenshot for my configurations and blocked facebook webpage

Hi Sir lferrara,

Good Day

Sir I found out that the error was caused by not issuing certificate on my Browser.

I followed the  SSL CA Certification Guide on Knowledge base https://community.sophos.com/kb/en-us/123048, it allow me to access on facebook.com

But then, you can LIKE, Comment etc into facebook supposedly it must be blocked  by my firewall rule.

Thank you.

kunkka,

use the log viewer in order to understand which firewall rule is matched (for allowed traffic).

If you are unsure, move this rule to the top or share with us your Firewall rules.

Regards

kunkka,

use the log viewer in order to understand which firewall rule is matched (for allowed traffic).

If you are unsure, move this rule to the top or share with us your Firewall rules.

Regards

Hi Sir lferrara

Good Day

I already moved this into top of my fwall rule

Please find attached screenshot

Thank you Sir

Hi Sir lferrara

Good Day

From SSH perspective, I prompt this command  system application_classification microapp-discovery show 

It is currently off, do i need to turn it ON? 

Thank you Sir

Attached screenshot for your reference.

That's why micro-app scanning is not working.

Enable it and try again!

Hi Sir lferrara,

According to this KB https://community.sophos.com/kb/en-us/126550

if I enter this command 

system application_classification microapp-discovery show

and the result is OFF

this will be the next command to be entered.

system application_classification microapp-discovery off

..... or much this will be the right command system application_classification microapp-discovery ON

Thank you

kunkka,

you need to activate micro-app discovery, so the ON switch must be used. Go on Sophos Website and download the CLI documentation for more commands.

Regards

Hi Sir lferrara,

I will turn it ON now,,, and i will get back to you whatever the results may be..

thank you sir 

Hi Sir  lferrara,

After upon turning ON micro app discovery it is 90 % working

The ONLY issue that is pending is the VIDEO PLAYBACK ong Facebook, currently u can play any shared/uploaded videos on facebook...
is there any way to prohibit that?

thank you

kunkka,

use the application and web filtering logs in order to understand what is still missing for videos on Facebook and block them accordingly.

Regards