GOOGLE MAPS WHILE BLOCKING OTHER GOOGLE SERVICES

[j.moore]

Does anyone have any ideas on how to permit access to Google Maps but block access to all other Google services? I have tried using a rule matching the Google-Maps application however it requires google-base which allows many other Google services. I have also tried using custom URLs for maps.google.com and www.google.com/maps; however, Google maps seems to require access to resources at www.google.com/.

The customer is currently using a Squid proxy with detailed regex expressions to accomplish this. Below are some examples. They would like to remove the proxy and use the firewall only. 

acl ALLOWED_URL url_regex -i ^https?://www.google.com/favicon.ico$
acl ALLOWED_URL url_regex -i ^https?://www.google.com/images/branding/product/ico
acl ALLOWED_URL url_regex -i ^https?://www\.google\.com/(maps|xjs)
acl ALLOWED_URL url_regex -i ^https?://www\.google\.com/s(earch)?\?tbm=map
acl ALLOWED_URL url_regex -i ^https?://www\.google\.com/gen_204\?oq=

[vsys_remo]

Hi @j.moore

Why don't you add the same URLs (without regex) to your custom URL category?

[j.moore]

I tried that. It doesn't seem to match on the full string. I think Custom URLs only support domains and subdomains, not the variables. 

[BPry]

@j.moore,

You can't use variables for this. 

[j.moore]

I figured that. What other options do I have?