topic I am having the same issue - in Network Security

Facebook Chat, post, comment block with Firepower 6.0

linlinoo — Tue, 12 Mar 2019 13:05:29 GMT

Hi,

I would like to discuss about blocking FB chat, post and comment with firepower 6.0. In our LAB, we can block FB application from app filtering features but we can't block FB chat, post or other messenger app. Now, we are also using SSL inspection policy but we can't block those app. How can we do to block those app ? Thanks in advance.

Hello Team,

Jetsy Mathew — Mon, 01 Aug 2016 05:51:48 GMT

Hello Team,

If this is a new installation , please start the device in the latest version .

Using the application filter in the Access Control policies rules, you can choose the facebook filters available and choose action as Block with reset and save the changes.Please refer the facebook filter options available.

Please redeploy the policies and you can see it gets blocked. Make sure that there is no other conflicting rules, and verify the position of the rules. Dont put a url and a application filter in same rule.

Rate and mark correct if the post helps you

Regards

Jetsy

Hi,

Pujita Patni — Mon, 01 Aug 2016 16:24:10 GMT

Hi,

You should be able to block these using an Access Control Policy.

When you search for Applications as a condition, you will see the three that you need " Facebook Chat", "Facebook Comment" and "Facebook post". Here is the screenshot showing the same:

You can use this as a condition and block the required traffic in the rule. Make sure you deploy after making the changes so that it is pushed to the sensor.

Thanks,

Pujita

Rate if it helps !

Hi all,

linlinoo — Tue, 02 Aug 2016 06:09:50 GMT

Hi all,

Many thanks. Now, i have tested with your guide. But, my firewall still allow for those app.

- I configured SSL inspection policy (Decrypt-Resign), then access policy with application filter (block with reset).

- Then, I face one problem certificate error for some websites(facebook, yahoo, etc) as below. But, i can browse to https://cisco.com, https://ine.com or some websites.

So, i import certificate to trusted Authorities from Firefox. Then, i can solve certificate error. But, i can not block FB chat, post and comment.

What do i need to do more configuration to block FB chat, post, comment or other app blocking ? Thanks.

Hi Everyone,

linlinoo — Mon, 08 Aug 2016 04:50:22 GMT

Hi Everyone,

How about this issue ?

Yeah I still can't get it

kzip200888 — Thu, 25 Aug 2016 00:14:45 GMT

Yeah I still can't get it working either

You don't want to block

Abid Abdul Latif — Thu, 15 Sep 2016 17:43:42 GMT

You don't want to block facebook, you just want to block chat / post and comment ? correct ?

Yes, this is correct

kzip200888 — Sat, 17 Sep 2016 07:53:48 GMT

Yes, this is correct

I am unable to get this to

Jose Colon II — Wed, 21 Sep 2016 19:27:11 GMT

I am unable to get this to work either. The only one I can get to work is Facebook games. Chat and comment is still allowed even though they are checked to be blocked with reset.

To get this working, simply

kzip200888 — Fri, 23 Sep 2016 10:09:27 GMT

To get this working, simply upgrade to version 6.1 and implement again.

Version 6 is full of bugs and should of never of been released.

I will second the version

Abid Abdul Latif — Fri, 23 Sep 2016 13:39:13 GMT

I will second the version part of it

i am using 6.1.0-330 and all working as expected .. with no ssl policy i am able to block social media sites including twitter over https using url filtering and for the facebook i have app rules and its working.

are you able to block these

Ahmed Ismail — Mon, 26 Sep 2016 20:10:00 GMT

are you able to block these application ???, i think the problen is fmc see all facebook app as facebook look to attach

Hi;

mohamedMeh1 — Tue, 01 Nov 2016 11:50:06 GMT

Hi; Could you please share some connection events print screen? Regards Mehdi

Hi All,

linlinoo — Fri, 04 Nov 2016 07:52:59 GMT

Hi All,

I think we should open TAC case because we can't block some app (FB chat, bandwidth shaping, ultra surf, etc..) with lowest version. If we want to block something, cisco recommend that you should upgrade newest version. Now, cisco is changing the whole ASA to FTD (firepower threat defense). With FTD, we hope this OS will be covered to block those app. Currently, we can't easily to block those app without TAC.

I am having the same issue -

johnjersey — Tue, 08 Nov 2016 21:37:06 GMT

I am having the same issue - I can block facebook, but not games, chat etc

Same issue here with

Julio Coral Orbes — Thu, 01 Dec 2016 13:03:29 GMT

Same issue here with Firepower 6.1.0. Decryption is working fine, but the device is unable to recognize the micro Apps, in the connection events it only appears as Facebook. tested with Facebook images, video, games, likes, chat, none of them are detected.

Hi ,I am using version 6.2

hacizeynal — Tue, 21 Feb 2017 09:27:05 GMT

Hi ,I am using version 6.2 and I am still unable to block Facebook Chat or Comment ,Firepower is full of bugs !!

Re: Facebook Chat, post, comment block with Firepower 6.0

Samer R. Saleem — Mon, 18 Dec 2017 12:43:38 GMT

i have the same issue, im using v6.2.0.2

if i try allow only skype it wont work because it needs HTTPS, if i add HTTPS to allowed list, it will allow youtube and many other apps that works with HTTPS....

Re: I am having the same issue -

saintlan1 — Mon, 12 Feb 2018 21:36:57 GMT

This issue also my concern fb video appps unable to block on firepower. Fortinet can do.

Re: Facebook Chat, post, comment block with Firepower 6.0

HQuest — Sun, 25 Feb 2018 02:36:59 GMT

Seems you guys are hitting bug CSCvh91548. I have a similar case open with Cisco.