Unable to Block Mobile applications, torrent and Facebook videos on Firesight Management Center 6.0.1

[ahmed-mujeeb]

Dear All,

I am currently working on a client and their requirements are below. quotes in bracket will tell you what I have acheived yet

1) Url blocking (acheived)

2) Facebook videos and games only (unable to acheive)

3) torrent block (unable to acheive)

4) whatsapp and other mobile applications block (unable to acheive)

5) download accelators (unable to acheive)

please help me, I have tried all applications port urls to block this but unable to block

regards

Ahmed Mujeeb

[Claudiu Cismaru]

Does the system detect the applications for the flows? Can you check on the connection events? (you have to log at the end of connection to see them).

For (2) or other use cases when the application is a portion of the web application (based on the payload of the data), you have to do SSL decryption for being detected properly. Otherwise, all access to FB would be identified as generic Facebook. It could depend of the hostname of the servers used for videos or chat (different CNs used or different SNIs).

[Samer R. Saleem]

Hi Ahmed,

best way is to block any rule, then allow step by step....