Facebook app post/refresh issues

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Facebook app post/refresh issues

L1 Bithead

Hello,

 

Since a couple of days users encounter problems with the facebook app, all those users are using an Android device.

It isn't possible to post new messages, refresh new facebook messages and also notifications can not be refreshed. It seems that facebook is offline.

They never had this problems before. Using 4G and facebook works fine

 

I see in the Android playstore that there is an (facebook ) app update released on 22th august.

It could be related....?!

 

In the FW log I see al lot of denied connections to facebook subnets with the application "unknown-tcp"

subnets:

173.252.90.6/21
31.13.64.0/24

 

facebook issues.JPG

 

Are there known issues? Are there other PA users who experience this?

 

Best Regards,

Patrick

 

3 REPLIES 3

L3 Networker

 

 

The strange thing is that Facebook isnt identified as facebook or  SSL traffic

it looks like you are blocking unknow-tcp andd non-syn-tcp. (that good in most implementations)

 

As workaround you could  make a new application and make an application override  for that with the facebook subnets and port 443.

Allow it in your policy and test again.

 

We have no issues with facebook on android devices here.

 

ps: Hallo Landgenoot 🙂

 

Cyber Elite
Cyber Elite

It looks like they are all referencing Facebook's edge and star servers. I had to build a custom signature to actually get these to identify correctly as they were taking up a lot of space on the unknown TCP and UDP traffic reports that we generate. I'm not sure why PA doesn't categorize these servers, or why you would just now be seeing the issue. 

Hi Gertjan,

 

Thanks  for the response.

For now is the app-override function an acceptable workaround.

 

But the problem occurs out of the blue without any policy changes.

It should be related (I think)  to or facebook app updates or Palo Alto app updates. But what...

 

Best regards,

Patrick

  • 2124 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!