This article describes how to configure firewall rule to block traffic towards Facebook.

 

Prerequisites

  1. Versa Director installed and configured.
  2. Make sure NGFW (Next Generation Firewall ) services have enabled on the branch
    To know How to add NGFW service on Versa FlexVNF CPE read this article

 

Configuration

  1. Login into the Versa Director and navigate to the Configuration >Templates
  2. Edit the Template associated with the branch by clicking it

 

 

  1. On the branch template navigate to Configuration > Services > Next Gen Firewall > Security > Profiles > click on URL Filtering

 

 

  1. Click (+) to create new URL filtering profile
  2. Edit URL Filter will pop-up. Fill in the details:
    1. Name: Provide a Name to the Profile
    2. Click on Blacklist with Action as block
    3. In the strings section click (+) and mention the site name (www.facebook.com)

 

 

Alternatively, specify matching pattern in the Pattern section with regex (URL string to regex pattern match syntax   .*facebook.*) as shown in the snapshot below

 

  1. Click OK

 

 

  1. Navigate to Security > Policies and click on + to add new Policy (if default-policy is not present)
  2. Click on Rules tab

 

 

  1. Click on (+) to add a rule
  2. Pop-up window is opened to Add Rule

 

 

  1. In the Add Rule window in the General tab provide the name for the rule (i.e: Block_FACEBOOK_SITE).

 

 

  1. Then click on Enforce tab. Rest of the tabs (Source/Destination, Headers/Schedule, Applications/URL, users/Groups are not required to be edited in this use case)
  2. In the Actions section select Apply Security Profile
  3. Select URL Filtering option and select from Drop-Down the URL Filtering Profile we created from Steps 3 to 6 in this article.

 

 

  1. Click OK to complete the configuration.

Since we have done the configuration in Template mode, commit the template to the branch/branches where you want to apply this rule.

 

Verification

You can connect a host behind the branch and access the Facebook URL using a browser.

The user will not be allowed to access the Facebook URL and Error is displayed on browser.