Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
sam_astute
New Contributor

Application Control - "LinkedIn_Message" - Not blocking messaging

Hi All,

 

First time posting here so please be gentle!

 

I'm trying to block my users from being able to use LinkedIn messaging, I've created a policy with Application Control set to block the following Application Signatures:

LinkedIn_File.Download

LinkedIn_File.Upload

LinkedIn_Message

LinkedIn_Post

 

In Fortiview, it is showing that sessions for LinkedIn_Message are being blocked, but the messages are not being blocked, and users are able to send as normal.

 

I wonder if I'm missing something here?

 

If anyone has any ideas, please let me know :)

 

2 REPLIES 2
RyanYap_FTNT
Staff
Staff

Give this custom signature a try! 

 

F-SBID( --name "LinkedIn.Message_Custom"; --protocol tcp; --app_cat 23;  --service HTTP; --flow from_client; --pattern "/voyagerMessaging"; --no_case; --context uri; --pattern ".linkedin.com"; --no_case; --context host; --weight 20;  )

 

 

RyanYap_FTNT
Staff
Staff

Give this custom app control signature a try! 

 

F-SBID( --attack_id 5846; --name "LinkedIn_Message_Custom"; --protocol tcp; --app_cat 23;  --service HTTP; --flow from_client; --pattern "/voyagerMessaging"; --no_case; --context uri; --pattern ".linkedin.com"; --no_case; --context host; --weight 20;  )

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors