topic Re: Can't block URL, APP in General Topics

Can't block URL, APP

TaylorHung — Wed, 22 Feb 2023 08:23:34 GMT

Hello everyone,

I configured block web youtube by url and Microsoft Team by application control but it doesn't work, I can reach it.

Where did I misconfigure and how to fix it ?

Thanks a lot.

Regards,

TaylorHung

Re: Can't block URL, APP

TomerM — Wed, 22 Feb 2023 08:36:17 GMT

Hello TaylorHung,
it is difficult to troubleshoot without further information. I suggest either contacting TAC or if you can add a screenshot of the configuration you used?
*Remember this is a public forum. Make sure you do not share any personal data (IPs, passwords etc..)

Re: Can't block URL, APP

TaylorHung — Wed, 22 Feb 2023 08:41:39 GMT

I have attaced a picture of the policy configuration. You can check for me ?

Re: Can't block URL, APP

TomerM — Wed, 22 Feb 2023 09:05:23 GMT

Sorry I did not see the pic.
Policy rule looks ok.
Make sure you have added a new layer to the policy including the applications&URL Filtering there
If the issue is not resolved I recommend opening a ticket to TAC

Re: Can't block URL, APP

TaylorHung — Wed, 22 Feb 2023 09:27:01 GMT

Yep, I enabled the application and URL Filtering but it doesn't work

Re: Can't block URL, APP

G_W_Albrecht — Wed, 22 Feb 2023 10:56:47 GMT

What is shown in Logs ? If you use Any as Source instead of Admin ?

Re: Can't block URL, APP

RS_Daniel — Wed, 22 Feb 2023 12:36:30 GMT

Hello,

Can you share a picture showing what you have insie "Youtube.com" object? I usually block Youtube using the pre-defined application object "Youtube" + a custom Application site with following DNS names: youtube.com, *.youtube.com. Maybe you will need to add more DNS names, you can check the entire list in the Certificate Subject Alternative Name section in youtube's certificate, it will also depends what you are seeing in logs, try searching by IP and port 443 with profile Access Control on logs, you can check wich sites is browsing that IP (check image).

About teams, i always used the updatable object to allow deny this traffic, check if that is feasible for you it will be easier. Never tried with APC/URL blades. HTH

Regards

Re: Can't block URL, APP

Chris_Atkinson — Fri, 24 Feb 2023 09:43:34 GMT

Is HTTPS inspection enabled and how are those App/URL/service objects defined?

If your end users are using the Chrome browser, does your policy block QUIC traffic?

Note we have built-in objects such as:

Re: Can't block URL, APP

the_rock — Wed, 22 Feb 2023 13:24:25 GMT

As @G_W_Albrecht advised, check the logs, see where its accepted and we can better assist. Rule loos fine, but that on its own does not mean much, unless we can see from the logs why its being accepted.

Andy

Re: Can't block URL, APP

Sorin_Gogean — Wed, 22 Feb 2023 13:49:52 GMT

Hello TaylorHung,

Like others were stating, we're missing some information like what you defined in those Applications/URL Filtering objects.
Any reason you did not used the YouTube Application defined by Checkpoint ?

Youtube:

MSTeams:

Thank you,

Re: Can't block URL, APP

TaylorHung — Fri, 24 Feb 2023 02:10:30 GMT

Hello Daniel,

I have defined application youtube with dns name: youtube.com, *.youtube.com, *.youtube.com.* but it doesn't work

Regards

Re: Can't block URL, APP

TaylorHung — Fri, 24 Feb 2023 02:14:38 GMT

Hello Chris_Atkinson,

I attached the picture. I don't think that Checkpoint can't block URL.

How to fix that if you know.

Thanks a lot

Re: Can't block URL, APP

TaylorHung — Fri, 24 Feb 2023 02:20:39 GMT

Hello Albrecht,

I tried it, it didn't work. i cant understand. I think this is product trial then block URL

Re: Can't block URL, APP

the_rock — Fri, 24 Feb 2023 02:20:53 GMT

I always do the way you do it, except I simply add *youtube*, works like a charm. You can follow same logic for any other website.

Re: Can't block URL, APP

_Val_ — Fri, 24 Feb 2023 08:58:12 GMT

You did not answer the question. Do you have HTTPS Inspection enabled? If not, the application you defined will not be detected on TLS traffic, which is 100% of Youtube.