How to block video in Facebook

Products

• ProxySG Software - SGOS

Issue/Introduction

Install the following content policy language (CPL) on the appliance:

<Proxy>
    condition=profile-akamaihd Allow
    url.regex="fbcdn\-photos\-[a-z]\-a\.akamaihd\.net" Allow
    condition=facebook-referer condition=FB-video force_deny

define condition profile-akamaihd
    url.domain="fbcdn-profile-a.akamaihd.net"
end condition profile-akamaihd

define condition facebook-referer
    request.header.Referer="facebook.com"
    request.header.Referer="(.*)\.akamaihd\.net"
    request.header.Referer="www.youtube.com/embed/"
end condition facebook-referer

define condition FB-video
    url.regex="fbcdn(.*)\.akamaihd\.net"
    url.domain="googlevideo.com"
    url.regex="(.*)\-kul1\-1\.xx\.fbcdn\.net"
end condition FB-video

You can use the following policy to test on one client first. In this example, the test client IP address is 1.2.3.4/32.

<Proxy>
    condition=profile-akamaihd Allow
    url.regex="fbcdn\-photos\-[a-z]\-a\.akamaihd\.net" Allow
    client.address=1.2.3.4/32 condition=facebook-referer condition=FB-video force_deny

Note: You must enable SSL interception for this to work.