how to allow whatsapp and line and block other traffic with app patrol

Johnny · October 2018

we have UAG5100 and with last version firmware. we like to block any traffic except Whatsapp and LINE

but it's not working. after checking log. traffic match the rule but let it pass.
any one can help us?

Image: https://us.v-cdn.net/6029482/uploads/editor/vf/m5fqn9rl3awp.jpg

Image: https://us.v-cdn.net/6029482/uploads/editor/5g/anbj1i4bfnzs.jpg

Image: https://us.v-cdn.net/6029482/uploads/editor/pt/aaooar0cmt86.jpg

Image: https://us.v-cdn.net/6029482/uploads/editor/ka/6357sgxuddbz.jpg

Image: https://us.v-cdn.net/6029482/uploads/editor/21/efbtxhnfpaod.jpg

Zyxel_Emily · October 2018

Hi @Johnny,

In the current design, App Patrol is able to block WhatsApp/Line and allow other traffic but unable to allow only WhatsApp/Line and block all other traffic.

On USG series, we can use the other way to block most traffic except WhatsApp with the following steps.

However, this method doesn't guarantee all other traffic can be blocked and UAG5100 does not support FQDN address object.

Without FQDN object, you have to find out all IP addresses for WhatsApp and create the address object one by one.

(1) Add FQDN address for WhatsApp and group them in a group “IP-whatsapp”.

a. *.whatsapp

b. whatapp.*

Image: https://us.v-cdn.net/6029482/uploads/editor/i5/xgpgqgroqce3.jpg

(2) Add service port for WhatsApp and group them in a group “Ports-whatsapp”.

TCP: 5222,5223, 5228, 4244, 5242, 80, 443

Image: https://us.v-cdn.net/6029482/uploads/editor/wh/6knt743wr04d.jpg

(3) Add policy control rule and block others traffic.

Image: https://us.v-cdn.net/6029482/uploads/editor/gm/jg8d9emumfyg.jpg

Alfonso · October 2018

Is there a blocking rule at the end of your policy?

Zyxel_Emily · October 2018