Allow users to access an approved Facebook page but block all other Facebook pages

book

Article ID: 168330

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

Is it possible to allow users access to an approved Facebook page, such as a corporate page, but block users from accessing other Facebook pages?
 

Resolution

Perform the following steps:

Note: The following instructions use the Blue Coat Facebook page as an example:

www.facebook.com/bluecoatsystems
  1. Because Facebook uses HTTPS for this policy to work, you must enable SSL Interception on the ProxySG appliance. The following knowledge base articles describe how to enable SSL interception for a self-signed certificate or if you have an internal PKI:
  2. Add a rule to allow access to the Facebook page:
    • User-added image
  3. Because Facebook must use HTTPS, add a rule to allow access to tcp://www.facebook.com; else, the request for https://www.facebook.com will not work:
    • User-added image​​
  4. If you install this policy, you can access the page www.facebook.com/bluecoatsystems but not the entire page would load. This is because parts of the page are loaded from different URLs,so you will have to add an allow rule for the following URL: akamaihd.net
User-added image

If you install this policy, users can access the Facebook page www.facebook.com/bluecoatsystems and view all media on the page, but are blocked from accesing other Facebook pages.
 
If you wanted to have this rule match certain users or groups, you could add a Layer Guard in the Layer that will only allow these certain Users or Groups to match these rules:

User-added image

User-added image

Attachments