Facebook limited filtering

[Strachf]

Our business has a Facebook page but as a policy we have Facebook blocked as a whole.

Is it possible to unblock certain pages in Facebook only (eg. www.facebook.com/mybusiness) but maintain deny access to every other page?

[mikand]

You could do this by adding an allow rule before the block rule like so:

1)

appid: facebook

url: www.facebook.com/mybusiness

action: allow

2)

appid: facebook (or how your block rule looks like)

action: deny

Since PA uses top-down first-match visits to your business page would trigger first rule while other visits would trigger second rule.

Problems on the road:

* How are logins to facebook handled by PA (you might need to whitelist the login url aswell)?

* Even if you have www.facebook.com/mybusiness the other stuff on your page will be regular CDN stuff from facebook (which would be blocked by the second rule).

To fix that second problem you could create a custom app using facebook as parentapp (or web-browsing) and then add stuff like HTTP-HOST (*.fb.com or whatever the CDN is called) and HTTP-REFERER (^www.facebook.com/mybusiness). The problem now becomes that if any of your clients modify their browserheaders to include www.facebook.com/mybusiness as referer they will be able to access facebook (depending on which HTTP-HOST names you included in your custom app).

[Strachf]

Thank you. Got it working.