Technical Tip: custom application signature to block Facebook videos

[tino_p]

Description	This article describes the custom application signature to block Facebook videos.
Scope	FortiGate, Application signature.
Solution	The below document is explaining how to block applications with custom signatures: https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/233445/blocking-applications... This is an example of a custom signature to block Facebook videos only: F-SBID(--name "Facebook_Video.Custom";--protocol tcp;--service http;--flow from_client; --pattern ".fbcdn.net"; --context host; --distance 0,context; --no_case; --pattern "/v/"; --context uri; --within 15,context; --no_case; --pcre "/\.(mp4|webm)\?/i"; --context uri; --distance 0; --weight 20;--app_cat 23;)