How to allow only viewing of the Tweetdeck application with the ProxySG?

Products

• ProxySG Software - SGOS

Issue/Introduction

How to allow viewing of Tweetdeck application but not posting.

How to block Tweetdeck but allow viewing.

 

Resolution

Tweetdeck is a social media dashboard application for managing Twitter accounts. Similar to other Twitter applications, it interfaces with the Twitter API to allow users to send and receive tweets and view profiles.

Since Tweetdeck is all done over SSL, SSL Interception is required but can be limited to only intercepting social networking, as shown in this example. The following Content Policy Language (CPL) can be used to allow viewing of Tweetdeck but block posting. It allows following of others and viewing of channels but blocks posting on the site.

 

<ssl-intercept>

    category="Social Networking" ssl.forward_proxy(https) ssl.forward_proxy.issuer_keyring(default)

 

<Proxy>

    ALLOW condition= Destination-tweetdeck-specific

    ALLOW condition= Destination-tweetdeck http.method=(CONNECT, GET)

    ALLOW http.method=(CONNECT, GET) request.header.Referer= CombinedDestinationtweetdeck

    DENY url.domain=//tweetdeck.twitter.com/

               

define condition Destination-tweetdeck

    url.domain=//tweetdeck.twitter.com/

                url.domain=//ssl.google-analytics.com/

                url.domain=//pbs.twimg.com/

    url.domain=//twimg0-a.akamaihd.net/

    url.domain=//twimg.com/

end

 

define condition Destination-tweetdeck-specific

    url.domain="//tweetdeck.twitter.com/accounts"

    url.domain="//tweetdeck.twitter.com/logout" ;allowing logout

    url.host=tweetdeck.twitter.com url.path.substring=/login ;enables captcha for login page

end

 

The CPL can be added in a CPL Layer in Visual Policy Manager (VPM) or in the Local Policy File.

 

How to add as CPL Layer in the VPM

 

1. Go to the Management Console.
2. Select Visual Policy Manager.
3. Add a CPL Layer.
4. Copy and paste in the CPL code