topic Re: Facebook-chat not blocking for specific account!! in General Topics

Facebook-chat not blocking for specific account!!

alle — Wed, 23 Mar 2011 16:32:41 GMT

hello !

I 'have seen on the same PC with the same windows user a strange problem:

when a user is connected on his facebook, I can see in the log facebook-chat DENY and the chat is blocked

when the same user is connected with an another facebook account , I can see in the log facebook-chat DENY but his chat works fine!!!!!

( the facebook work in http (not https) in the both case).

SO maybe they are a parameters on facebook account whose bypass this block application?

thanks for your idea or for your helps!!!

Re: Facebook-chat not blocking for specific account!!

gsamuels — Thu, 24 Mar 2011 02:28:28 GMT

Hi,

As long as the user is hitting the same policy we should still block facebook chat regardless of how they are logged in.

If this user is confirmed to be using the same policy every time you should open a support case so we can take a look at this.

Regards,

Gary S.

Re: Facebook-chat not blocking for specific account!!

alle — Thu, 24 Mar 2011 09:23:29 GMT

hi Gary!

I confirm that user match the same policy because in the both case I use the same user and PC on the network. I just use a different facebook account. SO I think that this two users use different parmeters for their facebook chat. And if the facebook chat have a specific parameters the app facebook-chat match in the rule with deny but is not blocking . Before open a case i try to understand which parameters create this problem on facebook account, and after I send the information to palo-alto support fort modify the app facebook-chat.

Alex

Re: Facebook-chat not blocking for specific account!!

kmckown1 — Tue, 19 Apr 2011 18:32:28 GMT

Alex,

Did you have any luck? I have noticed that if a user has enabled SSL/HTTPS within the Facebook Application, then the Palo Alto won't block this application. However, if a FB user hasn't enabled that setting, then the Palo Alto has no problem blocking.

Thanks,

Kent

Re: Facebook-chat not blocking for specific account!!

migration — Wed, 20 Apr 2011 12:39:30 GMT

kmckown1 ha scritto:

Alex,

Thanks,

Kent

Have you enabled SSL-Decryption?

Re: Facebook-chat not blocking for specific account!!

kmckown1 — Wed, 20 Apr 2011 20:06:49 GMT

Yes, I have enabled SSL-Decryption but I believe I have something within SSL misconfigured. I am digging into that aspect right now but there doesn't appear to be very much to it once the initial SSL decryption policy is in place.

Re: Facebook-chat not blocking for specific account!!

UhMayYeah — Tue, 03 Apr 2012 01:12:34 GMT

This might be a case of missing certificates/bad cerificates on the concerned host .

Check the session through the monitor logs you see the decrypt checkbox checked.

Try re-importing the certificate as Trusted Root CA to the Browser.