topic Re: YIK YAK in General Topics

YIK YAK

wmumper — Fri, 07 Nov 2014 14:33:52 GMT

Due to Cyber-bullying issues we have blocked access to Yik-Yak over our Campus Wi-Fi network. The application filter worked for a few weeks but after a recent update to the yik yak app the filter is no longer functioning. I have had to resort to blocking IP's which is becoming a hassle since they have spread their service all over AWS.

Any idea when this may get patched up in the filter?

William

Re: YIK YAK

hshah — Fri, 07 Nov 2014 15:03:55 GMT

Hi William,

Block "yik-yak" application via policy. When you say its no longer working, there are two possiblities.

1. Firewall identifies it as "yik-yak" traffic and allows it.

2. Firewall doesnt identify as a "yik-yak" traffic and allow it.

If option 1 is true than its a configuration issue.

If option 2 is true than yik-yak application decoder is changed. Firewall doesnt know new decoder. In that case open a TAC case. Provide captures from end client and firewall. And TAC will update decoder.

Let me know if this helps.

Regards,

Hardik Shah

Re: YIK YAK

wmumper — Fri, 07 Nov 2014 15:40:16 GMT

Firewall detects it as before and blocks it. However the app looks like it falls back to other connection methods to circumvent. It pauses a moment then makes makes connections across AWS hosted servers on 80 and 443

Re: YIK YAK

hshah — Fri, 07 Nov 2014 15:50:03 GMT

Hi Wmumper,

Actually still firewall should be able to handle this scenario. I would suggest to open a TAC case. They will ask for packet capture and might improve content.

Regards,

Hardik Shah

Re: YIK YAK

wmumper — Fri, 07 Nov 2014 16:29:50 GMT

Roger that.

Re: YIK YAK

ssharma — Fri, 07 Nov 2014 16:32:15 GMT

Hi Wmumper,

Do you have ssl decryption on the device? If not could you try to enable it for just your source IP, try to access it see if that resolves the issue?

This document describes about ssl decryption :

How to Implement SSL Decryption

Hope this helps. Thank you.

Re: YIK YAK

wmumper — Fri, 07 Nov 2014 17:23:56 GMT

I do not, I will take a look and let you know.

Thanks for the assistance.

Re: YIK YAK

sbabu — Fri, 07 Nov 2014 22:51:55 GMT

Hi Wmumper,

One of my customer was having same issue. When I checked monitor logs, I could able to see that traffic is passing through port 443. So I enabled SSL decryption and it has been blocked.

How to Implement SSL Decryption

Regards,

Sarath