topic Re: Block WhatsApp - App &Url Filtering in General Topics

Block WhatsApp - App &Url Filtering

NunoAlves22 — Thu, 11 Mar 2021 17:13:35 GMT

Hi mates, i have a client that want's the filesharing and downloads from WhatsApp blocked and only allow text messages. I've created a rule blocking the Service WhatsApp Messenger-file transfer on the App & Url Filtering but it's not working, the user still can download files. I made a little research about it and i found this link : https://knowledge.broadcom.com/external/article/169299/block-photovideo-files-upload-transfer.html where they identify the domains which WhatsApp uses to download files. i Created the objects manually but still...doesn't work. Did anyone manage to make this work? or something similar?

Regards

David Pinto

Re: Block WhatsApp - App &Url Filtering

Vincent_Bacher — Thu, 11 Mar 2021 20:11:37 GMT

Didn't know that there is an application called WA filetransfer. 😳

Anyway

As WA is encrypted between endpoints, I don't believe that what you want to achieve is feasible.

Re: Block WhatsApp - App &Url Filtering

PhoneBoy — Thu, 11 Mar 2021 21:16:32 GMT

What version/JHF level?
To block most HTTPS sites (which this surely is) you need to be on a fairly recent version (R80.30 with most recent JHF and above) for this to work correctly due to the use of SNI.

It looks like you’re using domain objects, which won’t work here for various reasons.
You probably want to use “Internet” in the destination field and define the relevant hosts as part of a Custom Application Sites.

Re: Block WhatsApp - App &Url Filtering

the_rock — Fri, 12 Mar 2021 00:09:46 GMT

Thats interesting issue...Im trying to think logically here if there would be any application you can use for this, but sounds like you found the right one. I dont know if using custom url category would help here...question though...when customer has successful connection, what rule does it go through?

Andy

Re: Block WhatsApp - App &Url Filtering

NunoAlves22 — Tue, 16 Mar 2021 11:33:30 GMT

Hi PhoneBoy the version i have at the moment is : Deployment Agent build: 2019 | R80.30 take 200 . I'm going to try you suggestion and will give feedback. What Vincent_Bacher told before also makes sense and i already thought about it. Once the traffic is encrypted on WhatsApp i don't know if this is feasible, but the question is Checkpoint has the WhatsApp Messegenger File Transfer available has an App to allow or drop. Regards

Re: Block WhatsApp - App &Url Filtering

_Val_ — Tue, 16 Mar 2021 11:56:52 GMT

Use of destinations as you are trying to do, will not work. Make sure you use Internet or Any for destination. The rule you have is not matching, that's your issue.

Re: Block WhatsApp - App &Url Filtering

_Val_ — Tue, 16 Mar 2021 11:57:57 GMT

There is a built in application for WA file transfer, you do not have to re-invent the wheel. However, source and destinations seem wrong to me

Re: Block WhatsApp - App &Url Filtering

_Val_ — Tue, 16 Mar 2021 11:59:18 GMT

Also, triple check your HTTPSi is working