Version 18.5 MR4 Build 418 - Application filter "Facebook Video Playback" is not working anymore.

Hi, change the classification to "unsanctioned" should block it.

Ian

Hi rfcat,

Please be informed that changing to unsanctioned is just a filtering option in XG and doesn't block any Facebook videos. 

Awaiting yours,

What is the version of the IPS and Application signatures under the pattern updates ?

Here:

Also here: 

Hey Wilson James Wong,

I just replicated the issue and for me it's working flawless on my network: I am not able to play any facebook videos on my phone !!

So this is the policy I have been using under the FW rule:




I would suggest go through the config once again and if still not working, raise a support request !!  

Hi,

please check your web -> exception list, there is a facebook series of exceptions there which could be causing your issue?

Ian

Hi Vivek Jagad,

I've followed your settings but still Facebook videos are playing. I will now raise a support request regarding this.

Hi rfcat_vk

I have no exception entry regarding Facebook series etc.

Any thoughts guys?

Hi, 

Our Lab confirmed the way Facebook videos work changed, and they have released new signatures to handle it. Please retry and let us know if blocking Facebook videos is now working for you. 

Bob,

Thank you for the confirmation. Can you share the new signatures that I must use to block Facebook videos?

Wilson

As long as you have automatic pattern updates enabled, your device would automatically update to the latest IPS signatures. There's no manual download required. 

You can then just retry your policy to see if blocking Facebook video is working for you. 

Bob,

App filter such as Facebook Video Playback is still not working to block Facebook Videos. As I've check using Current Activities > Live Connections > Filter to my device IP > It shows that playing Facebook Videos uses Facebook Website app filter.



This filter blocks the whole Facebook Website in PC and Facebook pictures and videos in mobile devices which obviously does not meet our target to blocked Facebook videos only. Moving forward, any recommendations?

Looking forward to hear from you soon.

Bob,

App filter such as Facebook Video Playback is still not working to block Facebook Videos. As I've check using Current Activities > Live Connections > Filter to my device IP > It shows that playing Facebook Videos uses Facebook Website app filter.



This filter blocks the whole Facebook Website in PC and Facebook pictures and videos in mobile devices which obviously does not meet our target to blocked Facebook videos only. Moving forward, any recommendations?

Looking forward to hear from you soon.

Did you try blocking Facebook videos but allow Facebook website, to see if videos are being blocked? 

Can you share a screenshot which shows which IPS signature version you have installed on your device? 

Yes. Here's my fw rule.



Here's my device live connection details:


Here

Do you have Facebook Videos blocked in your 'Facebook video playback' app control policy? 

Yes. Here's the content of the app control policy.

For Facebook video to be detected, the HTTPS traffic must be decrypted. Do you have any exception to bypass HTTPS decryption for Facebook traffic? 

None. I don't have any exception for Facebook in my firewall configuration.

Are you sure your Facebook traffic is hitting that particular FW rule with HTTPS decryption? Can you post a screenshot of your SSL/TLS inspection settings? 

I don't see anything wrong based on your screenshots so far (if that's the FW rule traffic is hitting & SSL/TLS inspection is enabled), and internally we are able to detect Facebook videos using the latest signatures. Did you open a support case? 

Here.



I haven't file a support case on this one. I will do this later today.

Any comments?

As the orange banner at the top of this page says, you don't have SSL/TLS decryption enabled. 

You need to enable the toggle switch at the top, so the firewall can see inside the Facebook traffic, apply signatures and detect video playback.