This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is there a way to block iMessage with Application Control?

I am looking to block iMessage for certain VLANs and I wondered if anyone had success doing this with filters or application control.  We are a school using Macbooks and it has been requested for them not have iMessage access.  I do not see that option in application control (feature request!!), but I see a few other Apple protocols which I thought might work in a certain combination.  Anyone have any luck?  Similarly, I noticed the 'FaceTime' app control option was not actually working when I turned it on and tested it, so did anyone have success blocking that?  I opened a ticket for this question but was only told the "iMessage feature is not part of Application Control...".  Thanks for any help.



This thread was automatically locked due to age.
  • According to this article, you should only need to not open port 5223.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Thanks!  I just created a firewall rule dropping my student VLAN traffic on port 5223 and iMessage no longer works.  FaceTime is also blocked (which is fine) and I will report back if anything critical is negatively impacted, but so far this looks very promising.  I am kind of surprised the Application Control block for APNS did not achieve the same thing, but I'm not real clear on the functional differences.  Thanks again!