topic RE: Using the built in firewall in accespoint AP370 and AP250 in Aerohive Migrated Content

Using the built in firewall in accespoint AP370 and AP250

jan_boje — Tue, 27 Nov 2018 22:24:00 GMT

We want to block facebook video, this works fine if you try it from a phone. Video is block.

If we try form a computer (https) facebook is not block.

Is it possibel to block Https trafic with the built in firewall in Aerohive accesspoint.

best regard

Jan boje

RE: Using the built in firewall in accespoint AP370 and AP250

samantha_lynn — Tue, 27 Nov 2018 23:58:00 GMT

We can technically block HTTPS traffic, but not HTTPS for facebook specifically. When you say facebook is not blocked for computers, do you mean facebook video or facebook general? It is possible to block facebook video without blocking facebook, so I just want to be sure.

Overall, you'd have better luck doing this through a content filter or firewall, our APs don't get as granular in their firewall rules as a content filter will.

RE: Using the built in firewall in accespoint AP370 and AP250

jan_boje — Wed, 28 Nov 2018 01:19:00 GMT

I mean facebook video for computers.

how can we block that for computers ?

RE: Using the built in firewall in accespoint AP370 and AP250

samantha_lynn — Wed, 28 Nov 2018 02:40:00 GMT

That rule should do it. Again, the APs aren't really designed to be content filters. We can do small tasks via the user profile IP firewall, but for global rules like this, for a client as large as Facebook, we recommend using a content filter or your network firewall.

RE: Using the built in firewall in accespoint AP370 and AP250

jan_boje — Wed, 28 Nov 2018 04:00:00 GMT

I know that it is not a firewall. 🙂

what rule are you talking about the rule built in is not working.

RE: Using the built in firewall in accespoint AP370 and AP250

samantha_lynn — Wed, 28 Nov 2018 04:01:00 GMT

The rule you have to block facebook video, that works for your mobile clients, that is the only way we have of blocking this site. Since that is not working, we can conclude we need a content filter to accomplish this.

RE: Using the built in firewall in accespoint AP370 and AP250

jan_boje — Wed, 28 Nov 2018 04:10:00 GMT

okay - I will tried it for mobile phone.

I think it would be a good idea if you make some examples what can you use the firewall to and where it is useless. You got a lot of website that you can block but it is not working for computer. I can not find any documentation ……….

RE: Using the built in firewall in accespoint AP370 and AP250

jan_boje — Wed, 28 Nov 2018 16:12:00 GMT

I have uploaded a screen dump from "All Applications by Usage" as you can see student is using Facebook a lot. Can anyone explain how this is collected. Is it only from mobile phone or is from mobile phone and computers ?

RE: Using the built in firewall in accespoint AP370 and AP250

samantha_lynn — Thu, 29 Nov 2018 03:56:00 GMT

It's likely that the service for facebook video was built for the mobile application and the web application likely runs on a different protocol. You could try to build your own service in the HiveManager to capture this, or use a content filter.