It seems that one of our clients staff members has been able to access facebook using https://facebook.com which is bypassing the URL content filter. Any ideas on how to block facebook across the board?

You could block HTTPS by IP port except for users that need to access https sites (e.g. facebook) or block the facebook IP address(es).


As an aside, does this staff member know that facebook is prohibited?

Well actually it's students who have been youtubing 'how to unblock facebook' and managed to figure out how to get around the keyword block. They are aware they are not supposed to be on facebook, however this applies to all staff really.

I need to ensure HTTPS is not blocked completely as most staff tend to use webmail when not on site.

Where would I block HTTPS by IP port or block facebook IP addresses?

Do you run an internal DNS ? if so you could create a zone for facebook.com and point it to a different I.P address.

You would also need to put a tick in the 'Prevent web access from IP address' box in the CSM -- Web content section of your router.

Open DNS can also be used to block certain sites quite well.

A quick search would have revealed the below thread.
http://www.forum.draytek.co.uk/viewtopic.php?t=13149

Mordorf wrote: A quick search would have revealed the below thread.
http://www.forum.draytek.co.uk/viewtopic.php?t=13149

Thanks for the link however, this appears to be for a different router and the 2910 doesnt have the Keyword Group and Keyword Object under the Object Settings tab.

Would you be able to explain in a little more detail how I would do this on a 2910 using the latest firmware?

Many Thanks,

Luke