
Not applicable
Created on ‎10-16-2009 08:36 AM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
how to block facebook?
hi,
I have in url filter
www.facebook.com block
and the url filter is enabled on protection profile, and yet so well is connected to facebook
buscar
Solved! Go to Solution.
1 Solution
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Here is a different solution.
We had a similar problem at the school board with youtube. Some of the responses ended up getting google dns names. (Go figure!) I simply created a dns rule and applied it to everything. If you made a dns request for youtube & that included our dns servers, the packet was dropped. I set it up as a timed policy so that it operated during school hours only.
My clients are happy with that. If you wished to refine it & allow certain people access, you would have to isolate them on a specific network or in a certain address range and allow them access to a tertiary internal dns server that is not restricted by the dns policy. You would also have to create a policy restricting who could make requests to that dns server.
Make sure you fully inform your clients of the full implications of the policy you implement, but I can tell you I have no irate calls from teachers saying that " little Johnny accessed Youtube. I thought you said it was blocked!"
Victor
11 REPLIES 11
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
As Facebook uses many servers and many prefix domains
blah.facebook.<countryid>
Best solution is to use " Application Control" in FOS 4.1 and enable a generic Facebook block. App Ctrl blocks the Application " Facebook" . Or even more granular like Facebook.chat etc. You may consult the online ressources as well
http://www.fortiguard.com/applicationcontrol/ListOfApplications.html
http://www.fortiguard.com/applicationcontrol/serviceUpdateHistory.html
-R.

Not applicable
Created on ‎10-19-2009 01:15 PM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I own you in forti 3.0 I tried to download the 4.1 and I could not do it ..
I have my login and password to the Fortinet support but there does not give me a link for downloading 4.1 as I Forti ..
so I think I have all the functionality that you tell me

Not applicable
Created on ‎10-19-2009 01:31 PM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
you can also use Regular Expression in url filter with word " facebook"
its working perfect to me in 3.0MR7p2

Not applicable
Created on ‎10-19-2009 01:40 PM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
apology just as serious in the url filter because I have
www.facebook.com block
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Depending on your hardware unit (you did not specify), version 4 may not be available. Also, blocking just ' facebook' doesn' t work. They also use Akamai servers, and those resolve to different names, so it still gets through. I had to block the entire ' Social Networking/Personal' category in Fortiguard to do that. A bit drastic, but it did the trick for us here. Our users have no reason to go there. We' re a hospital...
Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com
Bob - self proclaimed posting junkie!See my Fortigate related scripts
at: http://fortigate.camerabob.com
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
just use fortiguard content filter and block all social networking sites... go to Fortiguard Web Filtering - General Interest - Personal Relationships and block all...
That blocks Myspace, twitter facebook and everyother stuiped site.... also go to Potentially Liable - Proxy Avoidance and block it while your at it...
No more social junk sites.. More production!
FCNSP
FCNSP
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Great, except when the CIO asks why he can' t get to Facebook.... Bleah....
Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com
Bob - self proclaimed posting junkie!See my Fortigate related scripts
at: http://fortigate.camerabob.com
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
thats when you use the FSAE client and make all users authenticate to the fortigate and setup specific policy' s for user groups.
FCNSP
FCNSP

Not applicable
Created on ‎10-29-2009 10:12 PM
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
currently when i have include the filter to block yet it still can acess thorugh this website : https://www.facebook.com and there are cetain websites which i' m using https so i can block my https or else my other websites also will be block how do i overcome this.....?
my setup is currently : auto dchp and all is block from acessing any internet except the websites which i allow in the URL FILTER under WEB FILTER and websites my staff wanna acess i will register in the URL FILTER and allow it , example : www.yellowpages.com.my ----> TYPE(SIMPLE) ------> ACTION(ALLOW)
then they can u the website
