How to Block TikTok using Access Rules

This article shows how to block TikTok using Access Rules

1. Login to the Firewall
2. Navigate to OBJECT | Match Objects | Addresses | Address Objects.
3. Click to +Add.
   
4. Choose the name, and select WAN as Zone Assignment.
5. Type as FQDN.
6. Add individually each FQDN Hostname:
   v16a.tiktokcdn.com
   ib.tiktokv.com
   v16m.tiktokcdn.com
   api.tiktokv.com
   log.tiktokv.com
   api2-16-h2.musical.ly
   mon.musical.ly
   p16-tiktokcdn-com.akamaized.net
   api-h2.tiktokv.com
   v19.tiktokcdn.com
   api2.musical.ly
   log2.musical.ly
   api2-21-h2.musical.ly
   And IP addresses:
   161.117.70.145
   161.117.71.36
   161.117.71.33
   161.117.70.136
   161.117.71.74
   205.251.194.210
   205.251.193.184
   205.251.198.38
   205.251.197.195
7. Click Save
   
   
8. For the networks:
   185.127.16.0/24 
   182.176.156.0/24
   216.58.207.0/24
   47.89.136.0/24
   47.252.50.0/24
   
9. Click Save
10. Navigate to OBJECT | Match Objects | Addresses | Address Groups.
11. Click +Add
    
12. Insert a name.
13. Add all object addresses inserted in the step 6 and step 8
14. Click on Save.
    
15. Navigate to POLICY | Rules and Policies | Access Rules.
16. Select LAN to WAN.
17. Click +Add
    
18. Insert a rule name
19. Action as Deny
20. In this example we are using Any as Source Address.
21. Destination Address Block TikTok Group (Name of the inserted Address Object group on step 12).
22. Click Add.
    
    

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

1. Login to the Firewall
2. Navigate to MANAGE | Objects | Address Objects | Address Objects.
3. Click to +Add.
   
   
4. Choose the name, and select WAN as Zone Assignment.
5. Type as FQDN.
6. Add individually each FQDN Hostname:
   v16a.tiktokcdn.com
   ib.tiktokv.com
   v16m.tiktokcdn.com
   api.tiktokv.com
   log.tiktokv.com
   api2-16-h2.musical.ly
   mon.musical.ly
   p16-tiktokcdn-com.akamaized.net
   api-h2.tiktokv.com
   v19.tiktokcdn.com
   api2.musical.ly
   log2.musical.ly
   api2-21-h2.musical.ly
   And IP addresses:
   161.117.70.145
   161.117.71.36
   161.117.71.33
   161.117.70.136
   161.117.71.74
   205.251.194.210
   205.251.193.184
   205.251.198.38
   205.251.197.195
7. Click ADD
   
   
8. For the networks:
   185.127.16.0/24 
   182.176.156.0/24
   216.58.207.0/24
   47.89.136.0/24
   47.252.50.0/24
   
9. Navigate to MANAGE|Objects | Address Object | Address Groups.
10. Click +Add
    
    
11. Insert a name.
12. Add all object addresses inserted in the step 6, and 8
13. Click on OK.
    
    
14. Navigate to MANAGE| Rules | Access Rules.
15. Select LAN to WAN.
16. Click +Add
    
    
17. Insert a rule name
18. Action as Deny
19. In this example we are using LAN Subnets as Source Address.
20. Destination Address Block TikTok Group (Name of the inserted Address Object group on step 11).
21. Click Add.