Blocking LinkedIn Messaging Uploads on Edge SWG (ProxySG)

Products

• ProxySG Software - SGOS
• ISG Proxy

Issue/Introduction

Unable to Block LinkedIn Chat Uploads using Application Classification on Edge SWG (ProxySG)

OR

Using Application Operations block LinkedIn Messaging Uploads on Edge SWG (ProxySG)

Environment

Release :

Component :

Resolution

1)  Make sure Edge SWG (ProxySG) is licensed for "Application Classification" & it is Enabled as in below screenshot.

 

2) You need to make sure "SSL Interception" is enabled on Edge SWG (ProxySG).

3) Create a Web Access Layer rule with "Destination: Combined Destination Object"

On the Top box, select "Application Name" and select "LinkedIn" as Application as below 

On the Bottom box, select "Application Operation" and select all "Uploads" as below

4) You can limit the rule with specific "source objects" or "Any" with meaningful Destination object name & Action  as "Content Filter Deny" 

Important Note:  Blocking downloads has no control for social networking sites. Downloads from social networking is too generic (you can't block download from anyone's post), Downloads is more appropriate for categories like file storage and emails. Below are some of possible operations possible using "Applications" & corresponding "Application Operations". You can review it under "sitereview.bluecoat.com" > Application > Application Descriptions > LinkedIn

 

Additional Information

An alternate way would be to use a new 'Application Operation' in the destination & define the Supporting application as 'LinkedIn' & the Operation as 'Post Messages' in the Destination object.

Your will receive the below error message when you try and create a post on LinkedIn with this policy applied.

Please note that this will block only LinkedIn post operation i.e. the user will not be able to create posts. Operations on LinkedIn Chat is not affected.

To Block "LinkedIn Messaging / Chat" , You would require to create new "Destination Combined Object" With "LinkedIn Application" in top box and Request Category "Chat (IM)/SMS" in the bottom box. You Can define "Source" object as per your requirement with "Action: DENY" (As in below screenshot).

Above rule will block "LinkedIn Messaging (Chat)" as below