Site blocking

[olly ahmed]

How to block facebook(including android apps for facebook) completely from my network.Please share a sample configuration.

[Vinit Jain]

You can use an ACL to block a website matching the FQDN. but Even in that case, the website might be reachable as a FQDN might be mapped to multiple IP addresses. 

Please refer to the below document as it shows an example to block a website.

https://supportforums.cisco.com/document/66011/using-hostnames-dns-access-lists-configuration-steps-caveats-and-troubleshooting#Multiple_hostnames_resolve_to_the_same_IP_address

Hope this helps.

Regards

Vinit

[Vinit Jain]

Though, as a sample configuration, you can use as below:

access-list 101 deny tcp any host facebook.com eq www
access-list 101 permit ip any any

(Interface applied to):
int fa 0/1
ip access-group 101 out

But you will still need to deny any other IP's that the website may have (either for mobile app or the web).

Thanks

Vinit