topic Re: Facebook app post/refresh issues in General Topics

Facebook app post/refresh issues

ppater — Mon, 29 Aug 2016 06:40:01 GMT

Hello,

Since a couple of days users encounter problems with the facebook app, all those users are using an Android device.

It isn't possible to post new messages, refresh new facebook messages and also notifications can not be refreshed. It seems that facebook is offline.

They never had this problems before. Using 4G and facebook works fine

I see in the Android playstore that there is an (facebook ) app update released on 22th august.

It could be related....?!

In the FW log I see al lot of denied connections to facebook subnets with the application "unknown-tcp"

subnets:

173.252.90.6/21
31.13.64.0/24

Are there known issues? Are there other PA users who experience this?

Best Regards,

Patrick

Re: Facebook app post/refresh issues

Retired Member — Mon, 29 Aug 2016 11:19:15 GMT

The strange thing is that Facebook isnt identified as facebook or SSL traffic

it looks like you are blocking unknow-tcp andd non-syn-tcp. (that good in most implementations)

As workaround you could make a new application and make an application override for that with the facebook subnets and port 443.

Allow it in your policy and test again.

We have no issues with facebook on android devices here.

ps: Hallo Landgenoot 🙂

Re: Facebook app post/refresh issues

BPry — Mon, 29 Aug 2016 15:41:05 GMT

It looks like they are all referencing Facebook's edge and star servers. I had to build a custom signature to actually get these to identify correctly as they were taking up a lot of space on the unknown TCP and UDP traffic reports that we generate. I'm not sure why PA doesn't categorize these servers, or why you would just now be seeing the issue.

Re: Facebook app post/refresh issues

ppater — Thu, 01 Sep 2016 12:31:52 GMT

Hi Gertjan,

Thanks for the response.

For now is the app-override function an acceptable workaround.

But the problem occurs out of the blue without any policy changes.

It should be related (I think) to or facebook app updates or Palo Alto app updates. But what...

Best regards,

Patrick