Dear all,
There are a large number of fake "whatsapp web" pages at the top of Google search currently.
I saw that the IP range is: 104.21.x.x or the URL is https://uaa.xxxxxxxx / https://wh9.xxxxxxxx
Is there a more effective to block the IP range 104.21.0.1 - 104.21.255.255 or https://uaa.xxxxxxxx / https://wh9.xxxxxxxx
Thx
Hi Darren Lee ,
Thank you for reaching out to the Sophos Community Forum.
This doesn't seem feasible using the endpoint, you won't be able to apply IP range blocks with the policies. It might be best to use a firewall if you'd like this configuration.
However, I suggest submitting these addresses to Sophos Labs for reassessment. Our team may be able to pick this up and check out what's happening. You may submit them through this page: Submit a Sample
