How to allow Whatsapp while blocking other social media categories

If you have a service which allows Whatsapp but at the same time you have another service which blockes the category "Social Media" then it might now work as expected, because eventhough the Whatsapp falls under the category "Collaboration" but some of the destination IP used by Whatsapp will fall under Social Media, reason being Facebook and watsaap has same range of IP's.

Since the destination IP used by whatsaap falls under "Social Media" category it might be getting blocked. As a workaround don't use the category "Social Media" and instead used app-id to block (facebook, instagram, X twitter) 

PCLI CONFIG:

service internet051
   address 0.0.0.0/0
   access tenant051 allow
exit

service block-quic
  address 0.0.0.0/0
  transport udp
    start-port 443
  exit
  access tenant051 block
exit

service allow.internet051
  application-name YouTube
  application-name WhatsApp
  ..
exit

service block.internet051
  application-name Facebook
  application-name Instagram
  application-name X Twitter
  category Adult
  category Weapons
  category StreamingMedia
  ..
  access-policy tenant051 block
exit

router
  application-identification
    mode all
    web-filtering enabled true
  exit
exit

To find the which category the url falls under, use  the below pcli cmd:

[email protected]_web_filtering_2# lookup application by-domain node node0 x.com
✔ Looking up application identification...

================== ============= ======================
 Application Name   Category      Subcategory
================== ============= ======================
 X Twitter          SocialMedia   Social Web - Twitter

[email protected]_web_filtering_2#