Created on
‎09-03-2023
10:58 PM
Edited on
‎09-08-2023
08:37 AM
By
Stephen_G
Description |
This article describes how to browse LinkedIn sites but block the LinkedIn Jobs page from being accessed. |
Scope | FortiGate. |
Solution |
To achieve this, it is necessary to use a Web Filter along with deep inspection. These are mandatory for a functioning static URL filter.
To set this up, follow the steps below.
In the GUI:
In the CLI:
config firewall policy edit 3 set name "LinkedinJobBLOCK" set uuid 90d2ec82-48d1-51ee-34c2-e79f4313836e set srcintf "port2" set dstintf "port1" set action accept set srcaddr "all" set dstaddr "all" set schedule "always" set service "ALL" set utm-status enable set ssl-ssh-profile "deep-inspection" set webfilter-profile "Jobblock" set logtraffic all set nat enable set comments " (Copy of To Internet) (Copy of test)" next end
config webfilter urlfilter edit 4 <- Name of the static URL filter. config entries edit 1 set url "*linkedin.com/jobs*" set type wildcard set action block set antiphish-action block set status enable set referrer-host '' next edit 2 set url "*.linkedin.com/voyager/api/jobs/*" set type wildcard set action block set antiphish-action block set status enable set referrer-host '' next edit 3 set url "*.linkedin.com/litms/utag/voyager-web-jobs*" set type wildcard set action block set antiphish-action block set status enable set referrer-host '' next edit 4 set url "www.linkedin.com/voyager/api/graphql?variables=(count:1)&&queryId=voyagerJobsDashJobsFeed*" set type wildcard set action block set antiphish-action block set status enable set referrer-host '' next edit 5 set url "www.linkedin.com/voyager/api/graphqlincludeWebMetadata=true&variables(count:1)&&queryId=voyagerJobsDashJobsFeed*" set type wildcard set action block set antiphish-action block set status enable set referrer-host '' next edit 6 set url "platform.linkedin.com/litms/allowlist/voyager-web-jobs*" set type wildcard set action block set antiphish-action block set status enable set referrer-host '' next edit 7 set url "www.linkedin.com/voyager/api/jobs*" set type wildcard set action block set antiphish-action block set status enable set referrer-host '' next edit 8 set url "*launchpadContext=JOBS_HOME*" set type wildcard set action block set antiphish-action block set status enable set referrer-host '' next edit 9 set url "/www.linkedin.com/voyager/api/graphql?variables=(count:1)&&queryId=voyagerJobsDashJobsFeed*" set type wildcard set action block set antiphish-action block set status enable set referrer-host '' next end next end
config webfilter profile edit "Jobblock" <- Name of the web filter profile. set comment "Default web filtering." config web set urlfilter-table 4 <- Where x is the URL filter table ID, this number can be found in '3 config webfilter urlfilter' the URL filter created with the ID number. end
Results: After setting this up, the user will be able to browse LinkedIn but will be blocked from the 'Job' tab.
Related articles: |