How can I block social networking sites (eg. Facebook) using Application Control Advanced?

12/20/2019 106 23715

DESCRIPTION:

The application signature databases that were previously included with SonicWall intrusion prevention service (IPS) are now part of the Application Control feature. These signature databases are used to protect users from application vulnerabilities as well as worms, Trojans, peer-to-peer transfers, spyware and backdoor exploits. The extensible signature language used in SonicWall’s deep packet inspection engine also provides proactive defense against newly discovered application and protocol vulnerabilities.

The configuration method on the App Control Advanced page allows granular control of specific categories, applications, or signatures. This includes granular logging control, granular inclusion and exclusion of users, groups, or IP address ranges, and schedule configuration. The settings here are global policies and independent from any custom App Rules policy.

This article describes the method to block social networking sites Facebook, LinkedIn and SnapChat individually.

RESOLUTION:

1. Login to the SonicWall management GUI.
2. Click Manage in the top navigation menu.
3. Navigate to the Policies | Rules | Advanced Application Control page.
4. Check the box under Enable App Control and click Accept at the bottom of the page.
5. Under View Style: Category, select SOCIAL NETWORKING.
   
   
   
6. Under Application, select the applications that you want to block, one by one. In this example we select the following.
   • Facebook
   • LinkedIn
   • SnapChat
7. After selecting each application, click  configure button to open the Edit App Control App window.
8. Set Block to Enable.
9. Set Log to Enable.
   
10. Click OK .
    

Log Messages
When hosts behind the SonicWall try to access www.facebook.com, www.snapchat.com will get blocked and the following messages will be logged.

Resolution for SonicOS 6.2 and Below

The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.

1. Login to the SonicWall management GUI.
2. Navigate to the Firewall | App Control Advanced page.
3. Check the box under Enable App Control and click  Accept at the top of the page.
4. Under View Style: Category, select SOCIAL NETWORKING.
5. Under Application, select the applications that you want to block, one by one. In this example we select the following.
   • Facebook
   • LinkedIn
   • SnapChat
6. After selecting each application, click  configure button to open the Edit App Control App window.
7. Set Block to Enable.
8. Set Log to Enable.
   
9. Click OK .
   

Log Messages
When hosts behind the SonicWall try to access www.facebook.com, www.snapchat.com hey will get blocked and the following messages will be logged: