Got it

Huawei Enterprise Support Community

Community Forums Security

Allow users to use Whatsapp application through USG6600

Created: Mar 12, 2019 09:02:06Latest reply: Dec 20, 2021 14:19:48 599 3 9 0 1

View the author ^1#

[Issue]

All end users need to be able to access the WhatsApp application (calls, messages, multimedia).

[Analysis ]

- We checked the security policies on the firewall.

105722p011x2e2dce24j12.png?image.png

- We tested on one user and checked the session table but all apps were blocked.

[FW] display firewall session table verbose source inside 10.60.3.143

105844yxjha0ti0tiwgynj.png?image.png

[Root cause ]

No policy to allow the WhatsApp application.

[Solution]

Choosing only WhatsApp application in security policy doesn’t work at all even if specifying the entertainment application group.

SSL/https/http/rtp/rtsp/stun applications are necessary for WhatsApp, so we need to allow them too to be able to use all WhatsApp services.

- We created an application group for WhatsApp and added all necessary applications:

110002vcvtoia1nntnoii4.png?image.png

- We created a security policy to allow all users to use WhatsApp:

110039cmacvc3ocqoneamm.png?image.png

Then service can work fine after the test.

x
convention：
Emotion(0)

Like (9) Dislike (0) Favorite(1) Report

 Previous: how the NAT works in IPSecVPN on the usg firewall PART1 - REPRINT

Next: Collect the diagnostic information from USG firewall to get support



(0) (0)

^2#

sim_157 Created Mar 18, 2019 01:42:35

the pictures are very fuzzy, could you provide alternative one?

x
convention：

(0) (0)

^3#

sim_157 Created Mar 18, 2019 01:43:10

@Mohamed_Mostafa
anyway, it's an useful cases

x
convention：

(0) (0)

^4#

adrian_alucard

Moderator Created Dec 20, 2021 14:19:48

Very helpful content, thank you for sharing!

x
convention：

Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:

Politically sensitive content
Content concerning pornography, gambling, and drug abuse
Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy

Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.

Please bind your phone number to obtain invitation bonus.

Enterprise

Consumer

Corporate

Carriers

Allow users to use Whatsapp application through USG6600

Third Party’s Trade Secret

My Followers