How to Block Facebook Access, But Allow the Facebook 'Like' Button or Plugin
Resolution
Overview
Access to Facebook needs to be blocked. However, many sites have Facebook plugin or like button, and restricting Facebook results in a URL or app block response page. For example:
The required behavior is to allow the Facebook plugin, so that the other sites are allowed to display properly.
Details
Create a rule on top to allow the application, 'facebook-social-plugin'. There is no need to apply an URL filtering profile to this rule if all sites need to be allowed.
When the web browser tries to load any page which includes the facebook-social-plugin, the Palo Alto Networks firewall will match this rule and allow the proper display of the entire page. This will display the plugin and page properly as seen in the example below:
Access to Facebook will still be restricted with the URL filtering or app block rules.
owner: ukhapre