Re: Firewall Rules Layer 7

it.hmc · ‎03-17-2022

Good day,

We are looking for advice, we block all the social media sites in the firewall rules layer 7, and it's all working fine in the browser. However, mobile application social media still working and they can browse.

Thanks in advance

balaji.bandi · ‎03-17-2022

Check how is your network configured, if the browsers configured proxy ?

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Richard Burts · ‎03-17-2022

How are the mobile applications connected? Do they have exactly the same path to the Internet as computers do?

HTH

Rick

it.hmc · ‎03-19-2022

Thanks for your response, mobile devices are connected to our access points only social media applications still working, and in the browser, it's all blocked.

it.hmc · ‎03-19-2022

Thanks for your response we are not using any proxy. we don't have any issue with our browser once the mobile devices are connected to our access points they can access the social media to their applications but we block all the social media sites in the firewall layer 7.

Georg Pauwen · ‎03-19-2022

Hello,

which firewall do you have, and what are you blocking ? Mobile apps use many domains, and just blocking *facebook won't be enough.

Try and add at least all of the below:

facebook.com
facebook.com.edgekey.net
facebook.com.edgesuite.net
facebook.net
facebook.net.edgekey.net
fb.me
fbcdn-profile-a.akamaihd.net
fbcdn.com
fbcdn.net
fbsbx.com
fbsbx.com.online-metrix.net
instagram.com
instagramstatic-a.akamaihd.net
instagramstatic-a.akamaihd.net.edgesuite.net
m.me
messenger.com
tfbnw.net
whatsapp.com

it.hmc · ‎03-20-2022

Hi, we are using Meraki MX and we want to block also social media mobile applications like Facebook. However, we will try to add the one you provide thank you.

Georg Pauwen · ‎03-20-2022

Hello,

the list I posted is far from comprehensive. Github (linked below) has a much more extensive list...

https://github.com/Sinfonietta/hostfiles/blob/master/social-hosts

banlisie33 · ‎02-05-2023

For IMI (Webex Connect) digital channels integration of follower beast to ECE/CCE you may roll your own integration using the ECE Messaging API or there may be an integration to be had from Cisco CX (Advanced Services).