WhatsApp and Minemeld

[lvmh_onenetwork]

Hello,

It seems that Facebook allows again customer to easily access network requirement for WhatsApp (https://developers.facebook.com/docs/whatsapp/guides/network-requirements/) such as Ports, Protocols and IP Addresses.

The IP Addresses are stored in a ZIP file behind an URL.

I'm not an expert nor a beginner to develop a miner to exploit this source, but I'm ready to make some tests.

Do we have someone from the community who wants to take the challenge to develop that? 

In any case thanks a lot.
Regards

[lmori]

Hi @lvmh_onenetwork,

for sure that article is not really security focused (You can try to allow all of the IP addresses. However, it is best to just allow all outgoing traffic and connections from the above ports. :-))

PAN-OS does a good job at detecting whats-app application, do you think mining IP addresses would be useful anyway?

luigi

[lvmh_onenetwork]

Hello,

never late to respond on this topic 🙂

yeah, we are trying to use as much as possible the APP-ID but often (but very few) the application does not recognize the flow and I really have to avoid that.

Thank you for your answer.