Skip to main content
van_sta
Explorer III
Jul 31, 2024 11:21 AM UTC
Question

Except url from web filter and application control

Good morning: I have a policy that blocks social networks, I block them in web filter and application control but I have to except developers.facebook. com but I couldn't do it. I excepted it in deep inspection and in web filter I put that address to exclude it but it still blocks me. How can I do?

 

Thank you so much

3 replies

Mirlik
New Member
Jul 31, 2024 11:51 AM UTC

Hello, it is hard to tell. Visit that facebook page and check security events in Log & Report tab. By that you can tell, which security profile is blocking your traffic. I would guess, that you need to make exception in App control aswell. 

Translate
rsondal
Staff
Staff
Jul 31, 2024 12:37 PM UTC

Hi, 

In this case-:

1. Please do the test from one source ip.

2. So now as its still blocks you, please go to your UTM logs (web filter logs and application logs).

3. In both the logs tab, filter for your specific source ip and check if you are able to see any logs for Facebook as destination.

4. double click on that log it should show you details like which policy its hitting.

5. If still you are not able to see, then please use below commands on CLI to check what policy the source ip is hitting so you can see if that policy is blocking or not-:
dia sys session filter src x.x.x.x (source ip)
dia sys session list | grep policy_id

6. If still you are not able to find out the error. i would suggest opening a ticket with TAC team so one engineer can help you remotely.

Translate
van_sta
van_staAuthor
Explorer III
Aug 1, 2024 12:14 PM UTC

Rsonsal thanks for your reply.

I did what you said and I get this:

 

In web Filter:

Action

passthrough

Policy ID

Sistemas_vc (46)

Policy UUID

d42f1f5c-14db-51ee-c4a8-8a1cf78926d8

Policy Type

Firewall

 

 

Profile Name

WEBFILTER-sistemas

Request Type

direct

Direction

outgoing

URL Filter Index

21

URL Filter List

Auto-webfilter-urlfilter_u4ro4nn9c

Message

URL was exempted because it is in the URL filter list

 

In application control

I only have this url static.xx.fbcdn.net

Destination

IP

31.13.67.20

Port

443

Country/Region

United States

Destination Interface

 Fiberway (wan2)

Hostname

static.xx.fbcdn.net

URL

/

 

Application Control

Sensor

APPFILTER-sistemas

Application Name

Facebook

ID

15832

Category

Social.Media

Risk

 

Protocol

6

Service

SSL

Message

Social.Media: Facebook

Action

Action

block

Policy ID

Sistemas_vc (46)

Policy UUID

d42f1f5c-14db-51ee-c4a8-8a1cf78926d8

Policy Type

Firewall

In application control (Application and filter overrides)

Screenshot 2024-08-01 091654.png

 

In ssl I except developers.facebook.com, this policy has deep inspection.

Best regards.

Translate
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024