Blocking Facebook video

  • 1
  • Question
  • Updated 2 years ago
We are creating PoC for potential customer who demands that we also have firewall policy on wireless user profile to block youtube and facebook video, but it seems blocking facebook video doesn't work.

Using deny outbound general rule and
 - deny Youtube (that works)
 - deny Facebook Video (that doesn't)
 - Permit All

Have anyone encountered this kind of issues before. We are having latest HiveOS on devices as well as App signatures.

Can Facebook video protocol be updated/changed and Aerohive app signatures are outdated?
Photo of lowk3y

lowk3y

  • 9 Posts
  • 0 Reply Likes

Posted 2 years ago

  • 1
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes
Can you describe the steps you went thru to configure this? When you say you used a general rule to deny outbound traffic, what specifically do you mean? Do you mean that you went into the user profile and adjusted the IP Firewall settings?

I have HiveOS 6.5r4 running on my APs, and am using HiveManager 6.8r3.

I just cloned the default Guest firewall policy and modified it to add as Applications both Facebook Video and Facebook Video Chat (wasn't sure which you were talking about) like this:


Then, I went into my user profile and added this firewall object to both the from-access and to-access fields under IP Firewall:


I then pushed the configuration changes to all the APs in my personal Hive. Lastly, I connected my iPad to one of these APs, browsed to Facebook, and started looking for videos.

I did see several videos in my newsfeed, but clicking on any of them merely resulted in the spinning trying-to-load indicator, eventually returning to the static image or a "something went wrong" message. I could not view any Facebook videos.

Is this what you were trying to accomplish?
(Edited)
Photo of lowk3y

lowk3y

  • 9 Posts
  • 0 Reply Likes
Yes, thank you. We will test it out; the only difference is that we're using HM-NG (forgot to mention that in the beginning)
Photo of Metka Dragos

Metka Dragos

  • 51 Posts
  • 11 Reply Likes
The rules will be the same for HM NG.
Go to your Network Policy > SSID > User profile and turn on the Firewall
 

Create the Application rules as shown in the previous reply