Blocking Google Games

[tom.mccomb]

Has anyone had any success in blocking the Google browser based games yet?  I have seen a few threads with no answers.

I'm going to bust out the Fiddler and see where it is going during this but I don't want to interfere with normal users and their Google searches.  I was thinking there would be an app-id for it but I may have to find domain name that it is using.

[tom.mccomb · Accepted solution]

Blocking snake was the easiest so far, threat signature..medium threat and drop it...I never truly realized the depth of games that exist in the browser for Chrome.

I might need to chalk this one up for management to actually manage their people.

Appreciate the help all.

**UPDATE**

So far I've been able to block all the games, set up Fiddler and used the /fnbx/snake_arcade as my base and worked backwards.

I created a threat signature with three or conditions.

http-req-uri-path /fnbx/snake_arcade

http-req-uri-path /logos/2010/pacman10-hp.html

http-req-uri-path /logos/fnbx (This one seems to be the one to kill all of them.)

Once I added that third site, any of the ones google offered failed to load.  The driedel game loaded but nothing actually happened.

Thanks for the tip all..hopefully this helps.

[BPry]

@tom.mccomb,

That's because you won't really find a good way to block them. For example the snake_arcade game loads all of its elements directly from www.google.com. You could utilize '/fnbx/snake_arcade/' in a custom threat signature a guess, if you're doing full decryption in your environment, but you would have to do this for every game Google has. 

[OtakarKlier]

Hello,

Have you tried blocking with URL filtering and application filtering?

Yes this blocks them all, but its lost productivity :)

[tom.mccomb]

We are doing full decryption so this might be an option.  Going to throw some tests at that.

[tom.mccomb · Accepted solution]

Blocking snake was the easiest so far, threat signature..medium threat and drop it...I never truly realized the depth of games that exist in the browser for Chrome.

I might need to chalk this one up for management to actually manage their people.

Appreciate the help all.

**UPDATE**

So far I've been able to block all the games, set up Fiddler and used the /fnbx/snake_arcade as my base and worked backwards.

I created a threat signature with three or conditions.

http-req-uri-path /fnbx/snake_arcade

http-req-uri-path /logos/2010/pacman10-hp.html

http-req-uri-path /logos/fnbx (This one seems to be the one to kill all of them.)

Once I added that third site, any of the ones google offered failed to load.  The driedel game loaded but nothing actually happened.

Thanks for the tip all..hopefully this helps.

[HWAAcademy]

Hi

We have been scratching our heads on how to stop Google games.

How do you set up your palo alto to block snake, pacman e.t.c. ?

I.e. how do you create threat signatures e.t.c.

[Brandon_Wertz]

---

@HWAAcademy wrote:

Hi

We have been scratching our heads on how to stop Google games.

How do you set up your palo alto to block snake, pacman e.t.c. ?

I.e. how do you create threat signatures e.t.c.

---

@HWAAcademy  @tom.mccomb  Provided what he did:

"

So far I've been able to block all the games, set up Fiddler and used the /fnbx/snake_arcade as my base and worked backwards.

I created a threat signature with three or conditions.

http-req-uri-path /fnbx/snake_arcade

http-req-uri-path /logos/2010/pacman10-hp.html

http-req-uri-path /logos/fnbx (This one seems to be the one to kill all of them.)

Once I added that third site, any of the ones google offered failed to load.  The driedel game loaded but nothing actually happened."

This would be a custom IPS signature.

[HWAAcademy]

Thank you this worked.

Really appreciate the help :)