topic Re: Creating a custom app-id to block SocialMiner admin access in Automation/API Discussions

Creating a custom app-id to block SocialMiner admin access

vmusman — Fri, 19 Dec 2014 15:42:08 GMT

Hi guys, so I need to create a custom-id to block SocialMiner administrative access including the following:

http://x.x.x.x//administration.jsp

http://x.x.x.x//results.jsp

http://x.x.x.x/configuration.jsp

http://x.x.x.x/search.jsp

http://x.x.x..x/cmplatform

http://x.x.x..x/ccmservice

http://x.x.x..x/drf

I need to block access to these pages using both the fqdn typed in the browser and the ip address. I tried instituting a block policy for these using the http-uri-request-path variable but it only seems to block requests coming froom firefox. Can someone please assist?

Thanks

Re: Creating a custom app-id to block SocialMiner admin access

Dz3015 — Fri, 19 Dec 2014 17:07:51 GMT

Do you have a license for URL filtering? I'd create a Filter in there with the specific URL's you want to block.

Re: Creating a custom app-id to block SocialMiner admin access

vmusman — Fri, 19 Dec 2014 17:18:03 GMT

We do but the problem is I don't think that url filtering can block specific pages but not others.

Re: Creating a custom app-id to block SocialMiner admin access

Dz3015 — Fri, 19 Dec 2014 17:30:56 GMT

The UI lets you enter them into the filter but I will review that admin guide to verify it will enforce it that way.

Edit:

I checked the Admin guide and web gui guide and neither state it's not allowed so I would give it a try. Create a filter and add all the variations in the block list and test it.

Re: Creating a custom app-id to block SocialMiner admin access

vmusman — Fri, 19 Dec 2014 18:03:38 GMT

sounds like something I should definitely try thanks for the quick answers... It would still be great to do this via a custom app-id though

Re: Creating a custom app-id to block SocialMiner admin access

jkim2 — Thu, 08 Jan 2015 19:28:17 GMT

can you screenshot or provdie a google chrome developer mode output or a wireshark pcap after creating the custom app-id ?

Also do you ahve your scope to transaction or session ?

also is the admin access all over HTTP ? and not ssl