WLC block applications

[csocorro1]

Good morning,

Is it possible to block applications (also web access) like youtube and facebook with only a WLC? And in case it is, how is done?

Thank you 

[Philip D'Ath]

You need to configure an AVC profile.

http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115756-avc-guide-00.html

[mohanak]

With AVC you can block access to applications and websites.

Refer link : http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/AVC_dg7point5.html

[csocorro1]

Thank you for your response.

I configured the AVC profile and it worked well blocking the URL.

However, when I tested with the applications (youtube and linkedin) from different smartphones, the access wasnt blocked and the users could still get into those applications without any problems.

Is there another configuration needed? Or any other walkaround?

Thank you

[Philip D'Ath]

Lets try solving this a different way.  Do you operate you own internal DNS servers (such as AD servers) which are used by this network?

If so add a DNS domain called "youtube.com".  You don't even have to add any records.  That will stop access.

Ditto for any other domains.

[csocorro1]

We don't have AD servers.

The access we want to deny is from an app in a smartphone to the Internet. The specific apps to be denied are for example youtube, facebook, twitter, etc.

We were able to block the web access, but not the apps access. Thats our biggest issue.

Do you know anything else that can be done?

Thx

[George Stefanick]

I had a similar problem blocked web but not app. We ended up blocking the wifi subnet for this traffic at the fw. Not ideal but it solved a problem.