Explain, Why Are You On Facebook?

SYDNEY - Oct. 12, 2016 - PRLog -- Want to keep your users from wasting time on Facebook during work hours? Sounds easy right? Not necessarily. There are a few issues that might make this difficult at your organisation:

- What about Marketing? They need access to Facebook for work related tasks.

- If you block Facebook, what about allowing it's use out of hours?

- How can you even see Facebook traffic if it doesn't use http domains?

To Block Facebook You Need Deep Packet Inspection

Why is it important to use Deep Packet Inspection to block Facebook?

Facebook deals with a tremendous amount of Internet traffic, and as a result reportedly has around 60,000 servers. In practice this means that when a user accesses Facebook they connect to one of many different subdomains or IP addresses.

Here is a truncated list of Facebook subdomains and IP address ranges:
it.facebook.com
bs-ba.facebook.com
vi-vn.o.facebook.com
ms-my.facebook.com
secure.facebook.com
pixel.facebook.com

31.13.24.0/21 31.13.64.0/19 31.13.64.0/24 31.13.69.0/24 31.13.70.0/24 31.13.71.0/24

Without Deep Packet Inspection You Can't See Facebook Traffic

All you will see without deep packet inspection is one of hundreds of IP addresses. You don't always even get domains as Facebook Domain Name Servers will pass directly to static IP addresses.

With NetScope You Can Block Facebook During Certain Hours

With NetScope's deep packet inspection you can block Facebook traffic, and you can block it between certain hours. This would be useful to block Facebook during work hours. You can even allow it during lunchtime periods (no need to be totally Machiavellian).

You can also allow teams from Marketing to access Facebook at any time.

Interested?

If you'd like to find out more about blocking Facebook at your company, have a further and indepth read at:

https://netscope.com.au/blog/block-facebook-work-hours/