How can I block social networking sites (eg. Facebook) using Application Control Advanced?
08/17/2021 
111 
25011
DESCRIPTION:
The application signature databases that were previously included with SonicWall intrusion prevention service (IPS) are now part of the Application Control feature. These signature databases are used to protect users from application vulnerabilities as well as worms, Trojans, peer-to-peer transfers, spyware and backdoor exploits. The extensible signature language used in SonicWall’s deep packet inspection engine also provides proactive defense against newly discovered application and protocol vulnerabilities.
The configuration method on the App Control Advanced page allows granular control of specific categories, applications, or signatures. This includes granular logging control, granular inclusion and exclusion of users, groups, or IP address ranges, and schedule configuration. The settings here are global policies and independent from any custom App Rules policy.
This article describes the method to block social networking sites Facebook, LinkedIn and SnapChat individually.
RESOLUTION:
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
- Login to the SonicWall management GUI.
- Click Manage in the top navigation menu.
- Navigate to the Policies | Rules | Advanced Application Control page.
- Check the box under Enable App Control and click Accept at the bottom of the page.
- Under View Style: Category, select SOCIAL NETWORKING.
- Under Application, select the applications that you want to block, one by one. In this example we select the following.
- After selecting each application, click configure button to open the Edit App Control App window.
- Set Block to Enable.
- Set Log to Enable.
- Click OK .
Log Messages
When hosts behind the SonicWall try to access www.facebook.com, www.snapchat.com will get blocked and the following messages will be logged.
Resolution for SonicOS 6.2 and Below
The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.
- Login to the SonicWall management GUI.
- Navigate to the Firewall | App Control Advanced page.
- Check the box under Enable App Control and click Accept at the top of the page.
- Under View Style: Category, select SOCIAL NETWORKING.
- Under Application, select the applications that you want to block, one by one. In this example we select the following.
- After selecting each application, click configure button to open the Edit App Control App window.
- Set Block to Enable.
- Set Log to Enable.
- Click OK .
Log Messages
When hosts behind the SonicWall try to access www.facebook.com, www.snapchat.com hey will get blocked and the following messages will be logged:
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
Email SecurityProtect against today’s advanced email threats
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
