# Configuration Guide# How to Block Facebook via A Custom URL
# Configuration Guide# How to Block Facebook via A Custom URL*Product: NGAF*Version: 8.0.17
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
*1. Introduction1.1 ScenarioBlock FB by WebFiltering in Sangfor NGAF in participation of Sangfor HCI
1.2 Requirements1. The user's network has HCI and NGAFdevices.2. It is required to ensure the twodevice's network connectivity between them is normal.
*2. Configuration GuideWe will have the 192.168.1.0/24 networksegment for HCI and NGAF as the Internet gateway in this example.
2.1 NGAF ConfigurationStep1: Login to NGAF. Go to Objects > Open Content Indentification Database > choose URL Database > Click Add.
In Add URL Category window:Name: Enter name. Ex: BlockFacebookURL: Enter www.facebook and *.facebook.URL Keyword: Enter facebook.comClick OK
Step 2: Go to Object > Security Policy Template > choose Content Security. Click Add.
In New windows:
[*]Name: Enter name.
[*]Schedule: choose Work time (You can set in Object > Schedule > RecurringSchedule).
[*]Click URL Filter and click icon PC.
URL Database: scroll down and choose Category is BlockFacebook, which you have create.You can use the Search tool or choose the Categories in the URL Databasebelow that match the policy you want.Click OK.
After set up all parameter. Click Ok.
Step 3: Go to Policies > Network Security >Policies. Click Add > choose Policy for Internet Access Scenario.
In Add IP Group windows:
[*]Name: Enter Name
[*]Soucre: Choose Zone is LAN / Network Object choose LAN IP Group (You can create Network Object in Object tab > Network Object).
[*]Destination: Choose Zone is WAN / Network Object choose All.
[*]Click Next.
In Protection tab: click choose Content Security and scroll down select BlockFB, which you have create.Action: set Deny.Click Next and Ok.
Step 4: ResultUser can’t access to facebook site.
*3. Precaution1. During deployment,the communication between theSangforHCI and Sangfor NGAF is establish and can the devices under HCI can ping thegateway (Sangfor NGAF) Thanks for your sharing. :loveliness: Thank you also. Hoping to share more in the community :) Thanks for the helpful advice ! :victory::victory::victory: Nice, another information to study. Thank you Thanks for sharing Thank you for your sharing and helpful article This is a vey nice article. Please do more, RegiBoy :D Thanks for sharing Thank you very much for the information ... :handshake