WeChat block on MX80

[amacleod]

Hi all. Anyone successfully blocked WeChat? Our school has international students from China that are abusing our WiFi so I am looking to block WeChat. I don't think I can do much at layer 3 as it uses common protocols such as TCP. However, I'm trying to find something I can apply at Layer 7.

Anyone got WeChat blocked?

Thanks,

[Adam]

You'll likely need to use layer 7 firewall rules to block the IP ranges or DNS names the service uses.  There isn't a predefined category for that type of service since the "Internet Communication" category includes Gmail and Facebook messengers. 

[PhilipDAth]

This might seem a bit extreme, but how about blocking all access to China during schoool hours with a group policy?  Something like:

[PhilipDAth]

Untested by me - but Google suggests if you use content filtering and block the below domains it will stop working.

qq.com
qpic.cn

[Smail]

You can try it with OpenDNS.
https://domain.opendns.com/wechat.com