How to block video in Facebook
Article ID: 169044
Updated On:
Products
ProxySG Software - SGOS
Issue/Introduction
Install the following content policy language (CPL) on the appliance:
<Proxy>
condition=profile-akamaihd Allow
url.regex="fbcdn\-photos\-[a-z]\-a\.akamaihd\.net" Allow
condition=facebook-referer condition=FB-video force_deny
define condition profile-akamaihd
url.domain="fbcdn-profile-a.akamaihd.net"
end condition profile-akamaihd
define condition facebook-referer
request.header.Referer="facebook.com"
request.header.Referer="(.*)\.akamaihd\.net"
request.header.Referer="www.youtube.com/embed/"
end condition facebook-referer
define condition FB-video
url.regex="fbcdn(.*)\.akamaihd\.net"
url.domain="googlevideo.com"
url.regex="(.*)\-kul1\-1\.xx\.fbcdn\.net"
end condition FB-video
You can use the following policy to test on one client first. In this example, the test client IP address is 1.2.3.4/32.
<Proxy>
condition=profile-akamaihd Allow
url.regex="fbcdn\-photos\-[a-z]\-a\.akamaihd\.net" Allow
client.address=1.2.3.4/32 condition=facebook-referer condition=FB-video force_deny
Note: You must enable SSL interception for this to work.
<Proxy>
condition=profile-akamaihd Allow
url.regex="fbcdn\-photos\-[a-z]\-a\.akamaihd\.net" Allow
condition=facebook-referer condition=FB-video force_deny
define condition profile-akamaihd
url.domain="fbcdn-profile-a.akamaihd.net"
end condition profile-akamaihd
define condition facebook-referer
request.header.Referer="facebook.com"
request.header.Referer="(.*)\.akamaihd\.net"
request.header.Referer="www.youtube.com/embed/"
end condition facebook-referer
define condition FB-video
url.regex="fbcdn(.*)\.akamaihd\.net"
url.domain="googlevideo.com"
url.regex="(.*)\-kul1\-1\.xx\.fbcdn\.net"
end condition FB-video
You can use the following policy to test on one client first. In this example, the test client IP address is 1.2.3.4/32.
<Proxy>
condition=profile-akamaihd Allow
url.regex="fbcdn\-photos\-[a-z]\-a\.akamaihd\.net" Allow
client.address=1.2.3.4/32 condition=facebook-referer condition=FB-video force_deny
Note: You must enable SSL interception for this to work.
Feedback
Yes
No
Powered by
