topic Decryption Policy - Blocking things such as Facebook in General Topics

Decryption Policy - Blocking things such as Facebook

kaysun — Wed, 24 Sep 2014 14:04:14 GMT

We recently discovered that due to Facebook now being https:// that my users can get out to Facebook when using Internet Explorer. This actually cause quite an issue due to a bug also getting in.

How do I configure the decryption policy to get in to the session and block the traffic? From what I'm reading I have to configure this to block https sites?

Any assistance or advice would be greatly appreciated.

Thank you

Re: Decryption Policy - Blocking things such as Facebook

hshah — Wed, 24 Sep 2014 14:06:21 GMT

Hi Kaysun,

Following document will help you to configure SSL decryption.

How to Implement SSL Decryption

Let me know for any query.

Regards,

Hardik Shah

Re: Decryption Policy - Blocking things such as Facebook

HULK — Wed, 24 Sep 2014 14:23:33 GMT

Hello kaysun,

1. PAN is having app-ID for facebook. Hence, you can block facebook through a deny rule, without having SSL decryption in place. we have multiple application-ID for facebook to have more granular control.

2. In general, for HTTPS (SSL) connection, PAN will not be able to verify the content of the packet. Hence, you may use the certificate name ( through URL filtering) to control that traffic.

Hope this helps.

Thanks