cancel
Showing results for 
Search instead for 
Did you mean: 

Blocking WhatsApp Traffic Using MX84

SOLVED
Conversationalist

Blocking WhatsApp Traffic Using MX84

Perhaps someone can help.

Is it possible to block WhatApp traffic on our MX84?

WhatsApp is not listed on the layer7 firewall pre-difned applications, so how would go about this?

 

Thanks,

Rob

1 ACCEPTED SOLUTION

Accepted Solutions
Conversationalist

Re: Blocking WhatsApp Traffic Using MX84

Ok so I have tried blocking all the dns names on git hub to no avail.

I have also tried using the packet capture to work out the ip addresses one by on, then block them. Sadly it appears there are simply to many as each time I block one it moves to another ip.

Looks like this one is more tricky than it sounds. If anyone from Meraki are reading this I would be grateful if WhatsApp could be added to the category. It appears other appliances such as Sophos already do this.

Thanks,

Rob

8 REPLIES 8
Kind of a big deal

Re: Blocking WhatsApp Traffic Using MX84

You'll likely need to use layer 7 firewall rules to block the IP ranges or DNS names the service uses.  There isn't a predefined category for that type of service since the "Internet Communication" category includes Gmail and Facebook messengers. 

Adam R MS | CISSP, CISM, VCP, MCITP, CCNP, ITILv3, CMNO
If this was helpful click the Kudo button below
If my reply solved your issue, please mark it as a solution.
Kind of a big deal

Re: Blocking WhatsApp Traffic Using MX84

I believe WhatsApp uses the below domain to login, so blocking this using content filtering will probably do it.

c.whatsapp.net

 

Or go more aggressive, and just block:

whatsapp.net

whatsapp.com

Conversationalist

Re: Blocking WhatsApp Traffic Using MX84

Thanks for the ideas, unfortunately no joy just yet.

So far I have tried adding a L7 http hostname block on whatsapp.net and WhatsApp.com.

 

Any other ideas?

Kind of a big deal

Re: Blocking WhatsApp Traffic Using MX84


@rob1986b wrote:

Thanks for the ideas, unfortunately no joy just yet.

So far I have tried adding a L7 http hostname block on whatsapp.net and WhatsApp.com.

 

Any other ideas?


Quite a lot of information on github and Sophos

Robin St.Clair | Principal, Caithness Analytics | @uberseehandel
Conversationalist

Re: Blocking WhatsApp Traffic Using MX84

Ok so I have tried blocking all the dns names on git hub to no avail.

I have also tried using the packet capture to work out the ip addresses one by on, then block them. Sadly it appears there are simply to many as each time I block one it moves to another ip.

Looks like this one is more tricky than it sounds. If anyone from Meraki are reading this I would be grateful if WhatsApp could be added to the category. It appears other appliances such as Sophos already do this.

Thanks,

Rob

Kind of a big deal

Re: Blocking WhatsApp Traffic Using MX84

Somebody received this notification - 

 

Dear partners,
Please note that we have migrated the latest IP pools of WhatsApp to Facebook Mobile Partner Portal.

Feel free to browse to the Settings page of the portal and download the latest WhatsApp IP
pool: https://fb.me/mpp_support
Further IP pool updates are also done through the portal and are no longer distributed via email or through
WhatsApp web site. If you have not yet registered on the Mobile Partner Portal or have difficulties
accessing it - please request access through the following form and we'll be happy to assist:
https://fb.me/mpp_access For any technical requests please contact us through the Support section of the
portal: https://fb.me/mpp_support WhatsApp team

You could get creative with QOS.

 

Or have you tried using "bundle IDs" - e.g. - net.whatsapp.WhatsApp

Robin St.Clair | Principal, Caithness Analytics | @uberseehandel
Comes here often

Re: Blocking WhatsApp Traffic Using MX84

Why does it say solved, when there is no solution posted so far? Did anyone had luck getting Whatsapp blocked on Meraki?
Meraki Employee

Re: Blocking WhatsApp Traffic Using MX84

Hey,

 

Has anybody tried with a Layer 7 firewall rule with a Deny Social web & photo sharing > Facebook ? 

Since Whatsapp has been acquired, I'm wondering if they may be sharing the same space as FB now. 

 

 

Thanks.


Giacomo

Please keep in mind that what I post here is my personal knowledge and opinion. Don't take anything I say for the Holy Grail, but try and see!
Appreciate who helps and be respectful of every opinion and every solution offered.
Share the love, especially the Meraki one!
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.