Main Menu
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
SonicWall
  • Products
    • Network Security
      • Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
      • Security ServicesComprehensive security for your network security solution
      • Network Security ManagerModern Security Management for today’s security landscape
    • Advanced Threat Protection
      • Capture ATPMulti-engine advanced threat detection
      • Capture Security applianceAdvanced Threat Protection for modern threat landscape
    • Access Security
      • Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
      • Secure Mobile AccessRemote, best-in-class, secure access
      • Wireless Access PointsEasy to manage, fast and secure Wi-FI
      • SwitchesHigh-speed network switching for business connectivity
    • Email Security
      • Email SecurityProtect against today’s advanced email threats
    • Cloud Security
      • Cloud App SecurityVisibility and security for Cloud Apps
      • Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
    • Endpoint Security
      • Capture ClientStop advanced threats and rollback the damage caused by malware
      • Content Filtering ClientControl access to unwanted and unsecure web content
    • Product Widgets
      • Product Menu Right Image
      • Capture Cloud Platform
        Capture Cloud Platform

        A security ecosystem to harness the power of the cloud

    • Button Widgets
      • Products A-Z
        all products A–Z FREE TRIALS
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure WiFi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • English English English en
  • BLOG
  • CONTACT SALES
  • FREE TRIALS
  • English English English en
SonicWall
  • Products
    • Network Security
      • Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
      • Security ServicesComprehensive security for your network security solution
      • Network Security ManagerModern Security Management for today’s security landscape
    • Advanced Threat Protection
      • Capture ATPMulti-engine advanced threat detection
      • Capture Security applianceAdvanced Threat Protection for modern threat landscape
    • Access Security
      • Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
      • Secure Mobile AccessRemote, best-in-class, secure access
      • Wireless Access PointsEasy to manage, fast and secure Wi-FI
      • SwitchesHigh-speed network switching for business connectivity
    • Email Security
      • Email SecurityProtect against today’s advanced email threats
    • Cloud Security
      • Cloud App SecurityVisibility and security for Cloud Apps
      • Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
    • Endpoint Security
      • Capture ClientStop advanced threats and rollback the damage caused by malware
      • Content Filtering ClientControl access to unwanted and unsecure web content
    • Product Widgets
      • Product Menu Right Image
      • Capture Cloud Platform
        Capture Cloud Platform

        A security ecosystem to harness the power of the cloud

    • Button Widgets
      • Products A-Z
        all products A–Z FREE TRIALS
  • Solutions
    • Industries
      • Distributed Enterprises
      • Retail & Hospitality
      • K-12 Education
      • Higher Education
      • State & Local
      • Federal
      • Healthcare
      • Financial Services
      • Carriers
    • Use Cases
      • Secure SD-Branch
      • Zero Trust Security
      • Secure SD-WAN
      • Office 365 Security
      • SaaS Security
      • Secure WiFi
    • Solutions Widgets
      • Solutions Content Widgets
        Federal

        Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions

      • Solutions Image Widgets
  • Partners
    • SonicWall Partners
      • Partners Overview
      • Find a Partner
      • Authorized Distributors
      • Technology Partners
    • Partner Resources
      • Become a Partner
      • SonicWall University
      • Training & Certification
    • Partner Widgets
      • Custom HTML : Partners Content WIdgets
        Partner Portal

        Access to deal registration, MDF, sales and marketing tools, training and more

      • Partners Image Widgets
  • Support
    • Support
      • Support Portal
      • Knowledge Base
      • Technical Documentation
      • Community
      • Video Tutorials
      • Product Life Cycle Tables
      • Partner Enabled Services
      • Contact Support
    • Resources
      • Resource Center
      • Free Trials
      • Blog
      • SonicWall University
      • MySonicWall
    • Capture Labs
      • Capture Labs
      • Security Center
      • Security News
      • PSIRT
      • Application Catalog
    • Support Widget
      • Custom HTML : Support Content WIdgets
        Support Portal

        Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials

      • Support Image Widgets
  • COMPANY
    • Boundless Cybersecurity
    • Press Releases
    • News
    • Awards
    • Leadership
    • Press Kit
    • Careers
  • PROMOTIONS
    • Customer Loyalty Program
  • MANAGED SERVICES
    • Managed Security Services
    • Security as a Service
    • Professional Services
  • Contact Sales
  • Menu

How to block Google Hangouts on Desktop and mobile devices using App rules

10/14/2021 26 People found this article helpful 103,682 Views

    Download
    Print
    Share
    • LinkedIn
    • Twitter
    • Facebook
    • Email
    • Copy URL The link has been copied to clipboard

    Description

    This article describes how to block Google Hangouts on Desktop and mobile devices using App rules

    Resolution


     

    Resolution for SonicOS 6.5

    This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.


    Note:

    • This solution blocks DNS requests / responses only. If Google Hangouts is open before enabling this rule, it might allow access. However, when attempting to open afresh, it will be blocked.
       
    • This solution will not work if the DNS requests and / or responses do not traverse the SonicWall. For instance, if the DNS server of devices is behind the SonicWall and the DNS server has cached the IP addresses of Google Hangouts, such queries may not traverse the SonicWall and therefore will not be blocked by SonicWall.

    Procedure:

    Create Match Object

    1. Login to the SonicWall Management GUI
    2. Click Manage in the top navigation menu
    3. Navigate to the Objects | Match Objects page
    4. Click on Add and select Match Objects to open the Add/Edit Match Object window.
    5. Enter a name for this object under Object Name
    6. Set Match Object Type to Custom Object
    7. Set Input Representation as Hexadecimal
    8. Under Content, enter the following hex strings:
      • 056d74616c6b06676f6f676c6503636f6d00
        Note: This will block DNS queries / responses for mtalk.google.com
      • 7777770a676f6f676c656170697303636f6d
        Note: This will block DNS queries / responses for www.googleapis.com
        Image
    9. Click on Add
    10. Click on OK


    Create App Rule :

    1. Navigate to the Rules | Application Control page.
    2. Click on the Add button to open the Edit App Control Policy window.
    3. Enter the following information and click on OK.

    Image

    Note: You could lock it down further by Zone. For example,

    1. Set Connection Side to Server Side or Both
    2. Click on Advanced under Direction
    3. Set From to Any and To to WLAN (Any in case the server is internal)

    This will block DNS response from a server on the WAN or LAN.
    Image

    • To enable App Rules, Click on the Settings icon in the top of the same page Rules | Application Control
    • Check the box Enable App Rules  and Click on Accept
    Image
    Image



    Testing:

    In Chrome browsers, try to open the Hangouts app and it will fail. On mobile devices, the Hangouts app will open but will not be able to send messages.

    The following message will be logged in the SonicWall under Investigate |  Event LogsImage

    Resolution for SonicOS 6.2 and Below

    The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.



    Note:

    • This solution blocks DNS requests / responses only. If Google Hangouts is open before enabling this rule, it might allow access. However, when attempting to open afresh, it will be blocked.
       
    • This solution will not work if the DNS requests and / or responses do not traverse the SonicWall. For instance, if the DNS server of devices is behind the SonicWall and the DNS server has cached the IP addresses of Google Hangouts, such queries may not traverse the SonicWall and therefore will not be blocked by SonicWall.

    Procedure:

    Create Match Object

    1. Login to the SonicWall Management GUI
    2. Navigate to the Firewall | Match Objects page ( In older SonicOS firmware this page would be under Application Firewall | Match Objects)
    3. Click on Add New Match Object to open the Add/Edit Match Object window.
    4. Enter a name for this object under Object Name
    5. Set Match Object Type to Custom Object
    6. Set Input Representation as Hexadecimal
    7. Under Content, enter the following hex strings:
      • 056d74616c6b06676f6f676c6503636f6d00
        Note: This will block DNS queries / responses for mtalk.google.com
      • 7777770a676f6f676c656170697303636f6d
        Note: This will block DNS queries / responses for www.googleapis.com
        Image
    8. Click on Add
    9. Click on OK
    Create App Rule
    • Navigate to the Firewall | App Rules page.
    • Click on the Add New Policy button to open the Edit App Control Policy window.
    • Enter the following information and click on OK.

    Image

    Note: You could lock it down further by Zone. For example,

    1. Set Connection Side to Server Side or Both
    2. Click on Advanced under Direction
    3. Set From to Any and To to WLAN (Any in case the server is internal)

    This will block DNS response from a server on the WAN or LAN.
    Image

    • Enable the check-box Enable App Rules.
    Image



    Testing:

    In Chrome browsers, try to open the Hangouts app and it will fail. On mobile devices, the Hangouts app will open but will not be able to send messages.

    The following message will be logged in the SonicWall under Log | View

     
    Image


     

    Related Articles

    • App Control fails by schema error when editing VPN category
    • Custom Geo-IP list to exclude a website from Geo-IP filter
    • GVC stuck on acquiring IP for some users

    Categories

    • Firewalls > TZ Series
    • Firewalls > SonicWall NSA Series
    • Firewalls > SonicWall SuperMassive 9000 Series
    • Firewalls > SonicWall SuperMassive E10000 Series

    Not Finding Your Answers?

    ASK THE COMMUNITY

    Was This Article Helpful?

    YESNO

    Article Helpful Form

    Article Not Helpful Form

    Company
    • Careers
    • News
    • Leadership
    • Awards
    • Press Kit
    • Contact Us
    Popular resources
    • Communities
    • Blog
    • SonicWall Capture Labs

    Stay In Touch

    • By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. You can unsubscribe at any time from the Preference Center.
    • This field is for validation purposes and should be left unchanged.
    • Facebook
    • Twitter
    • Linkedin
    • Youtube
    • Instagram

    © 2022 SonicWall. All Rights Reserved.

    • Legal
    • Privacy
    • English
      Scroll to top
      Trace:957d8e7b1ca3887eccd6a78a7ba67e6e-76