Blocking Facebook causes embedded "like" buttons to trigger blocking page

Products

• Web Gateway

Issue/Introduction

You are using the Web Gateway proxy to block access to Facebook.com, but when you go to a page with a Facebook "Like" or "Recommend" button it obscures most content of the main page behind a blocking page.

Resolution

Workaround

1. Configure policy to ignore category “Custom Restrict List 1”.
2. Create a content exception in policy to block everything to facebook.
3. Create a blacklist with domain “*.facebook.com”, keyword “plugins/like.php”, and Category “Custom Restricted List 1”.
4. Clear the proxy cache.
5. Clear the cache within the client browser.

 

To add "Custom Restricted List 1" to a policy

1. In the User Interface (UI) of SWG appliance, Navigate to Policy> Configuration.
2. On the Policies tab, click on the Edit Policy button for the policy to edit.
   NOTE: The Edit Policy button is the button with a picture of a pencil.
    
3. Scroll down to the "Spyware Category" header.
4. If the category "Custom Restricted list 1" does not already appear, click the "Add Category" button on the Spyware Category header.
5. Click "Select Category".
6. Click "Custom Restricted List 1"
7. In the Action column for "Custom Restricted List 1", click Use Default.
8. Click Ignore.
9. Click Save.
10. Click Save and Activate Changes.

To create a content exception policy for facebook

1. On the Policies tab, click on the Edit Policy button for the policy to edit. NOTE: The Edit Policy button is the one with a picture of a pencil.
2. Scroll down to the "Content Filter Exceptions" header.
3. If the facebook.com does not already appear, click the "Add an Exception" button on the Content Filter Exceptions header.
4. On the new line, in the Domain Name/IP column, type: facebook.com
5. On the same line, in the Action column, click "Allow", then click "Block".
6. Type a description in the Description line.
7. Click Save.
8. Click Save and Activate Changes.

To create a blacklist entry

1. In the User Interface (UI) of SWG appliance, Navigate to Policy> configuration.
2. Click Add a Blacklist Entry
3. In the Name field, type: Facebook like button allow
4. In the Block field, type: *.facebook.com
5. In the Keyword field, type: plugins/like.php
6. In the Description, type: Facebook like button allow
7. In the Category, click "Minor Spyware Web Site", then click "Custom Restricted List 1".
8. Click Save.

 

Applies To

Web Gateway in Inline+Proxy or Proxy mode.