How can I block social networking sites (eg. Facebook) using Application Control Advanced?

10/14/2021 126 People found this article helpful 150,137 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

The application signature databases that were previously included with SonicWall intrusion prevention service (IPS) are now part of the Application Control feature. These signature databases are used to protect users from application vulnerabilities as well as worms, Trojans, peer-to-peer transfers, spyware and backdoor exploits. The extensible signature language used in SonicWall’s deep packet inspection engine also provides proactive defense against newly discovered application and protocol vulnerabilities.

The configuration method on the App Control Advanced page allows granular control of specific categories, applications, or signatures. This includes granular logging control, granular inclusion and exclusion of users, groups, or IP address ranges, and schedule configuration. The settings here are global policies and independent from any custom App Rules policy.

This article describes the method to block social networking sites Facebook, LinkedIn and SnapChat individually.

Resolution

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

1. Login to the SonicWall management GUI.
2. Click Manage in the top navigation menu.
3. Navigate to the Policies | Rules | Advanced Application Control page.
4. Check the box under Enable App Control and click Accept at the bottom of the page.
5. Under View Style: Category, select SOCIAL NETWORKING.
   
   
   
6. Under Application, select the applications that you want to block, one by one. In this example we select the following.
   • Facebook
   • LinkedIn
   • SnapChat
7. After selecting each application, click  configure button to open the Edit App Control App window.
8. Set Block to Enable.
9. Set Log to Enable.
   
10. Click OK .
    

Log Messages
When hosts behind the SonicWall try to access www.facebook.com, www.snapchat.com will get blocked and the following messages will be logged.

Resolution for SonicOS 6.2 and Below

The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.

1. Login to the SonicWall management GUI.
2. Navigate to the Firewall | App Control Advanced page.
3. Check the box under Enable App Control and click  Accept at the top of the page.
4. Under View Style: Category, select SOCIAL NETWORKING.
5. Under Application, select the applications that you want to block, one by one. In this example we select the following.
   • Facebook
   • LinkedIn
   • SnapChat
6. After selecting each application, click  configure button to open the Edit App Control App window.
7. Set Block to Enable.
8. Set Log to Enable.
   
9. Click OK .
   

Log Messages
When hosts behind the SonicWall try to access www.facebook.com, www.snapchat.com hey will get blocked and the following messages will be logged:

Related Articles

• DHCP server packet dropped, RPF check failed
• How to Block Facebook Apps using Application Control
• How to disable DPI-SSL Client and DPI-SSL Server as per access rule?

Categories

• Firewalls > NSa Series > Application Firewall
• Firewalls > NSv Series > Application Firewall
• Firewalls > TZ Series > Application Firewall