Blocking Facebook-Video

[Brandon_Wertz]

I've found two past posts on this topic, but nothing really only these lines.

*I've recently opened a ticket on this but was curious if anyone else has had this problem or been successful at doing so*

Has anyone actually been successful in blocking just "Facebook Videos" with every other functionality working using only the Facebook-Video application?

In the past when I tried just blocking "Facebook-Video" users were still able to stream videos on FB.  It wasn't until I blocked "Facebook-Base" in conjunction with URL cat CDN that streaming videos in FB had been blocked.

[Raido_Rattameister]

Are you decrypting SSL?

If you don't then Palo is unable to control sub-applications. You just see facebook-base for everything related to Facebook.

[reaper]

also take into account the facebook-video app (in conjunction with ssl decryption) will only be able to block videos that were uploaded to facebook. If a user has embedded a youtube video, that will also still be available unless you block youtube in addition to facebook-video

Tom

[Brandon_Wertz]

@Raido_Rattameister 

1. Yes we're decrypting.

2. Not necessarily true

FB-Video App shown w/o decryption

FB-Base App shown w/o decryption

FB-Base App shown w/decryption

[Brandon_Wertz]

@reaper good point.  In the past I didn't take into account the type of video content being posted.  

But as stated in my original post; with the "tweak" changing my security policy from solely blocking the application facebook-video to blocking the application facebook-base along with the URL category CDN I was able to block a video that played in FB when previously I was only blocking the "video" application.

Have either of you successfully blocked the application "facebook-video" by itself?

In a 24-hr period < 6MB of FB-Video traffic:

In a 24-hr period > 100GB of facebook-base traffic