topic Re: Blocking Facebook-Video in General Topics

Blocking Facebook-Video

Brandon_Wertz — Fri, 11 Dec 2015 17:11:38 GMT

I've found two past posts on this topic, but nothing really only these lines.

*I've recently opened a ticket on this but was curious if anyone else has had this problem or been successful at doing so*

Has anyone actually been successful in blocking just "Facebook Videos" with every other functionality working using only the Facebook-Video application?

In the past when I tried just blocking "Facebook-Video" users were still able to stream videos on FB. It wasn't until I blocked "Facebook-Base" in conjunction with URL cat CDN that streaming videos in FB had been blocked.

Re: Blocking Facebook-Video

Raido_Rattameister — Sat, 12 Dec 2015 16:34:57 GMT

Are you decrypting SSL?

If you don't then Palo is unable to control sub-applications. You just see facebook-base for everything related to Facebook.

Re: Blocking Facebook-Video

reaper — Mon, 14 Dec 2015 08:05:19 GMT

also take into account the facebook-video app (in conjunction with ssl decryption) will only be able to block videos that were uploaded to facebook. If a user has embedded a youtube video, that will also still be available unless you block youtube in addition to facebook-video

Tom

Re: Blocking Facebook-Video

Brandon_Wertz — Mon, 14 Dec 2015 14:12:06 GMT

@Raido_Rattameister

1. Yes we're decrypting.

2. Not necessarily true

FB-Video App shown w/o decryption

FB-Base App shown w/o decryption

FB-Base App shown w/decryption

Re: Blocking Facebook-Video

Brandon_Wertz — Mon, 14 Dec 2015 16:54:06 GMT

@reaper good point. In the past I didn't take into account the type of video content being posted.

But as stated in my original post; with the "tweak" changing my security policy from solely blocking the application facebook-video to blocking the application facebook-base along with the URL category CDN I was able to block a video that played in FB when previously I was only blocking the "video" application.

Have either of you successfully blocked the application "facebook-video" by itself?

In a 24-hr period < 6MB of FB-Video traffic:

In a 24-hr period > 100GB of facebook-base traffic