Skip to main content
sam_astute
sam_astute
New Member
July 2, 2018
Question

Application Control - "LinkedIn_Message" - Not blocking messaging

  • July 2, 2018
  • 2 replies
  • 6114 views

Hi All,

 

First time posting here so please be gentle!

 

I'm trying to block my users from being able to use LinkedIn messaging, I've created a policy with Application Control set to block the following Application Signatures:

LinkedIn_File.Download

LinkedIn_File.Upload

LinkedIn_Message

LinkedIn_Post

 

In Fortiview, it is showing that sessions for LinkedIn_Message are being blocked, but the messages are not being blocked, and users are able to send as normal.

 

I wonder if I'm missing something here?

 

If anyone has any ideas, please let me know :)

 

2 replies

RyanYap_FTNT
Staff
RyanYap_FTNT
Staff
July 18, 2018

Give this custom signature a try! 

 

F-SBID( --name "LinkedIn.Message_Custom"; --protocol tcp; --app_cat 23;  --service HTTP; --flow from_client; --pattern "/voyagerMessaging"; --no_case; --context uri; --pattern ".linkedin.com"; --no_case; --context host; --weight 20;  )

 

 

RyanYap_FTNT
Staff
RyanYap_FTNT
Staff
July 18, 2018

Give this custom app control signature a try! 

 

F-SBID( --attack_id 5846; --name "LinkedIn_Message_Custom"; --protocol tcp; --app_cat 23;  --service HTTP; --flow from_client; --pattern "/voyagerMessaging"; --no_case; --context uri; --pattern ".linkedin.com"; --no_case; --context host; --weight 20;  )

Terms & ConditionsAccessibility statement