How To Block WhatsApp

[TavoHern]

I've got someone asking me to block the App WhatsApp at their office. Anyone run into this or have any suggestions on how to do it?

[MRCUR · Accepted solution]

See previous discussion here: https://community.meraki.com/t5/Security-SD-WAN/Blocking-WhatsApp-Traffic-Using-MX84/m-p/12796

The search box at the top is very handy. 😄

[Meraki_Customer]

There is no solution though, on either posts. Still they mark it as solved.

[Guerino]

Hello,

I have blocked WhatsApp on firewall Layer 7 port 5222.  I included on Security &Sdwan > configure: Firewall > Port: 5222. For now, the rule block WhatsApp is working well.

This rule created on MX64.

I hope helpfull

Renato Guerino

Rule Whatsapp

[Guerino]

Hello,

I have blocked WhatsApp on firewall Layer 7 port 5222.  I included on Security &Sdwan > configure: Firewall > Port: 5222. For now, the rule block WhatsApp is working well.

This rule created on MX64.

I hope helpfull

Renato Guerino

[Meraki_Customer]

Port 5222 is not only for Whatsapp, it is used by many other applications such as Jabber, google chat, etc. And hence it will block much more. Not the correct way of achieving the goal.

---

@Guerino wrote:

Hello,

I have blocked WhatsApp on firewall Layer 7 port 5222.  I included on Security &Sdwan > configure: Firewall > Port: 5222. For now, the rule block WhatsApp is working well.

This rule created on MX64.

I hope helpfull

Renato Guerino

---

[Obrez]

For anyone dealing with this issue, Meraki and Umbrella were unable to provide a complete solution, due to the heavy integration with Facebook.  Umbrella and Meraki can block the web version, but the mobile app continued to work.  I had to use a layer 3 firewall rule to block the Facebook IP ranges associated with Whatsapp.  You can find them here: https://developers.facebook.com/docs/whatsapp/guides/network-requirements/

under the IP addresses section.  It was a complete pain to create 230 objects and 2 object groups (remember object groups only be 150 objects max) but I have successfully blocked whatsapp completely.  I know that the ip addresses may change in the future, but that is something I will just have to deal with when it comes along.

[lunchtimeres232]

Blocking WhatsApp usage in an office setting can be approached in a few ways:

1. Network Level Blocking: IT administrators can block access to WhatsApp by configuring the network firewall to restrict access to WhatsApp's servers. This approach effectively prevents any device connected to the office network from accessing WhatsApp.

2. Mobile Device Management (MDM) Software: If employees are using company-provided devices, MDM software can be used to restrict or block the installation and usage of WhatsApp and other unauthorized apps. MDM solutions offer granular control over device settings and app permissions.

3. Application Whitelisting/Blacklisting: IT administrators can implement application control policies to whitelist approved apps and blacklist prohibited ones. This can be done using endpoint security solutions or mobile device management platforms.

4. Educational Measures: Informing employees about the reasons behind the decision to block WhatsApp and promoting alternative communication channels for work-related communication can help in gaining their cooperation and understanding.

5. Policy Enforcement: Clearly define and communicate company policies regarding app usage and enforce consequences for violating these policies. This can include disciplinary actions for employees found using prohibited apps during work hours.

6. Monitoring and Reporting: Implementing monitoring solutions that track app usage can help identify instances of WhatsApp usage and enforce policy compliance.

[AlexaAli]

Hey! If they want to block WhatsApp at the office, an easy way is to block it at the network level. You can do this by setting up filters in the office router or firewall. Just block the domains WhatsApp uses, like web.whatsapp.com and the app’s server IPs. If you’re using something like a UTM or firewall software, you can create specific rules to block social media apps. Another option is to restrict app usage on work devices via mobile device management (MDM) software. It depends on how strict they want to get. Hope that helps!