<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Facebook limited filtering in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/facebook-limited-filtering/m-p/38004#M27823</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Our business has a Facebook page but as a policy we have Facebook blocked as a whole.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Is it possible to unblock certain pages in Facebook only (eg. www.facebook.com/mybusiness) but maintain deny access to every other page?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Wed, 23 May 2012 00:02:30 GMT</pubDate>
    <dc:creator>Strachf</dc:creator>
    <dc:date>2012-05-23T00:02:30Z</dc:date>
    <item>
      <title>Facebook limited filtering</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/facebook-limited-filtering/m-p/38004#M27823</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Our business has a Facebook page but as a policy we have Facebook blocked as a whole.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Is it possible to unblock certain pages in Facebook only (eg. www.facebook.com/mybusiness) but maintain deny access to every other page?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 23 May 2012 00:02:30 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/facebook-limited-filtering/m-p/38004#M27823</guid>
      <dc:creator>Strachf</dc:creator>
      <dc:date>2012-05-23T00:02:30Z</dc:date>
    </item>
    <item>
      <title>Re: Facebook limited filtering</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/facebook-limited-filtering/m-p/38005#M27824</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;You could do this by adding an allow rule before the block rule like so:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;1)&lt;/P&gt;&lt;P&gt;appid: facebook&lt;/P&gt;&lt;P&gt;url: www.facebook.com/mybusiness&lt;/P&gt;&lt;P&gt;action: allow&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;2)&lt;/P&gt;&lt;P&gt;appid: facebook (or how your block rule looks like)&lt;/P&gt;&lt;P&gt;action: deny&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Since PA uses top-down first-match visits to your business page would trigger first rule while other visits would trigger second rule.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Problems on the road:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;* How are logins to facebook handled by PA (you might need to whitelist the login url aswell)?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;* Even if you have www.facebook.com/mybusiness the other stuff on your page will be regular CDN stuff from facebook (which would be blocked by the second rule).&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;To fix that second problem you could create a custom app using facebook as parentapp (or web-browsing) and then add stuff like HTTP-HOST (*.fb.com or whatever the CDN is called) and HTTP-REFERER (^www.facebook.com/mybusiness). The problem now becomes that if any of your clients modify their browserheaders to include www.facebook.com/mybusiness as referer they will be able to access facebook (depending on which HTTP-HOST names you included in your custom app).&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 23 May 2012 06:26:16 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/facebook-limited-filtering/m-p/38005#M27824</guid>
      <dc:creator>mikand</dc:creator>
      <dc:date>2012-05-23T06:26:16Z</dc:date>
    </item>
    <item>
      <title>Re: Facebook limited filtering</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/facebook-limited-filtering/m-p/38006#M27825</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Thank you. Got it working.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 24 May 2012 03:15:16 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/facebook-limited-filtering/m-p/38006#M27825</guid>
      <dc:creator>Strachf</dc:creator>
      <dc:date>2012-05-24T03:15:16Z</dc:date>
    </item>
  </channel>
</rss>

