Unable to block actions in Whatsapp Web via Cloud SWG
Article ID: 416770
Updated On:
Products
Issue/Introduction
In the Cloud SWG policy, when in Portal mode, policy is applied to block actions like Download Files, Download Video, Upload Files, etc. for the Whatsapp domains (*.whatsapp.com, *.whatsapp.net) or for the Destination category "Chat (IM)/SMS".
After saving the policy, the restricted actions still can be executed in Whatsapp.
Cause
The cause of this issue is a limitation in the Cloud SWG policy when in portal mode for the application control. Whatsapp is not one of the applications that is supported for Content and Limits condition.
Please see below steps to see what applications are supported in Cloud SWG for the Content and Limits control field:
- Login to the portal
- Go to Policy > Content Filtering > Create a new rule
- In the Content and Limits section, you will see Actions. The next page shows a Filter. Look for your application in the filter. If your application doesn't show up in the filter, then there aren't any controls for it. I picked Google Drive as an example from my filter and I see the actions supported and associated with it:
Whatsapp is not in the Filter list of the applications. If the application isn't there, Cloud SWG cannot apply application control policy for actions to it.
Another site where we can see what applications support the different control actions is the below site. By clicking in the control operation desired, in the "Used By" list we will see the applications that support such control:
https://sitereview.bluecoat.com/#/application-operations
Resolution
Application control to Whatsapp can be achieved from the CASB portal after the Cloud SWG tenant has been integrated with the CASB product. Information on the integration process below:
Integrate Cloud SWG With CloudSOC (CASB)
A second option is to change the policy mode of the Cloud SWG tenant from Portal Mode to UPE mode. For that, Management Center is required to control the policy and knowledge of CPL policy code. Policy must be re-done after the change.
Feedback
