Decryption Policy - Blocking things such as Facebook

[kaysun]

We recently discovered that due to Facebook now being https:// that my users can get out to Facebook when using Internet Explorer.  This actually cause quite an issue due to a bug also getting in.

How do I configure the decryption policy to get in to the session and block the traffic?  From what I'm reading I have to configure this to block https sites? 

Any assistance or advice would be greatly appreciated.

Thank you

[hshah]

Hi Kaysun,

Following document will help you to configure SSL decryption.

How to Implement SSL Decryption

Let me know for any query.

Regards,

Hardik Shah

[HULK · Accepted solution]

Hello kaysun,

1. PAN is having app-ID for facebook. Hence, you can block facebook through a deny rule, without having SSL decryption in place. we have multiple application-ID for facebook to have more granular control.

2. In general, for HTTPS (SSL) connection, PAN will not be able to verify the content of the packet. Hence, you may use the certificate name ( through URL filtering) to control that traffic.

Hope this helps.

Thanks