How to best block TikTok and WeChat

[wtesolutions]

If we need to block TikTok and WeChat from all of our MX's, what is the best way of doing this? 

[DarrenOC]

Hi @wtesolutions , 

You could implement a layer 7 rule to block social web then under content filtering block the social networking category.

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering

[BlakeRichardson]

While what @DarrenOC  said will work it will also block anything social media related. Unfortunately the application firewalls on MX are not very granular.

[wtesolutions]

Agreed. I still need to allow access to Facebook, Twitter, etc Just block that we don't want. These services have so many URLs and IPs.  WeChat is not social media.  It is communication and I don't want to stop Slack that is used for business reasons. 

[PhilipDAth]

A little extreme, but you could try blocking all of China.

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings#Geo-IP_Based_F... 

Otherwise I would do a packet capture on port 53, look at the DNS records they lookup, and block those.