> Source: [sk180749](https://support.checkpoint.com/results/sk/sk180749)

# sk180749 - Blocking an Application in Harmony Mobile

| Property | Value |
|----------|-------|
| Solution ID | sk180749 |
| Date Created | 2023-03-30 |
| Last Modified | 2023-04-03 |
| Technical Level | General |
| Products | Mobile Security |
| Versions | Cloud |

## Symptoms

- To block user access to an app.

## Solution

With Harmony Mobile solution, you can block users from using an app or from accessing Internet content qualified as malicious, risky, illegal, restricted, banned or harmful.  

This SK uses TikTok as an example to describe the procedures to block an application.  

Method 1 - Blocking the App's Access to Internet
================================================

In this method, you can block the mobile app from accessing the Internet by setting the application risk level to **High** . When users install the app, they get a prompt to uninstall the app, and administrators are notified.  

**Note** - The user can still access the content of this application through other means, such as a web browser. For example, accessing TikTok though a browser.

1. In the Harmony Mobile portal, go to **Policy** \> **Global** \> **Application** \> **Application Exceptions** . Add the application package and set the risk level as **High** .  
   To get the application package name:  
   * For Android - The app's package name is in the URL of the app's Google Play Store listing.  
     For example, if the URL of an app page is `https://play.google.com/store/apps/details?id=com.zhiliaoapp.musically&hl=en&gl=US`, then the application package name is `com.zhiliaoapp.musically`.
   * For iOS - Go to apple.com and search for the app.   
     For example, TikTok. In the search results, click the app name. From the URL of the app (https://apps.apple.com/us/app/tiktok/id835599320), enter the ID number to the following command:  
     `curl https://itunes.apple.com/lookup?id=835599320 | jq '.results[] | .bundleId'`  

     This returns the application package name ("com.zhiliaoapp.musically").

   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk180749/Add_App_Exception202303291015211.png)  
   When users download the application, they are prompted to uninstall the app.  
   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk180749/App_uninstall202303291029273.jpg)
2. (Recommended) If you have enabled On Device Network Protection (ONP) and configured **Conditional Access** in the policy, then the system automatically blocks the devices at High Risk from accessing your corporate resources.  
   To enable Conditional Access, go to **Policy** \> **Global** \> **Network** \> **Content Inspection** \> **Conditional Access** . Add the network addresses to which you want to block the device access.  
   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk180749/Conditional_Access202303301053491.png)
3. To block the mobile app from accessing the Internet on Android devices, enable ONP and configure the policy to **Block Application Traffic** .  
   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk180749/Block_App_Traffic202303301057312.png)

Method 2 - Blocking the Application Traffic from both Mobile App and Web Browser
================================================================================

This is the recommended method where, you must enable ONP and specify the Blocked Locations to block the domains and IPs used by the application. This blocks all the traffic from the mobile app or web browser.  

**Note**-- This method applies to both Android and iOS devices.

1. Go to **Policy** \> **Global** \> **Network** \> **Content Inspection** \> **Blocked Locations**.
2. Set **Severity Level for Blocked URL events** as **Warning**.
3. Set **Show Events in Clients** as **ON**.
4. Add or import the list of domains and URLs used by the application.
5. Click **Save** .  
   ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk180749/Blocked_locations202303301107033.png)  

**Notes**   

* If you want to block the TikTok application, use the [TikTok Domains and IPs Full List file](http://downloads.checkpoint.com/fileserver/ID/127440/FILE/tiktok_Domains_Ips.csv) to import all the IPs and domain names of the servers used by the TikTok application.
* The system supports only 99 network addresses (because of limitations around the RAM that an app can be allocated in iOS devices). Therefore, to limit the number of entries, use the .csv [TikTok Domains and IPs Short List file](http://downloads.checkpoint.com/fileserver/ID/127439/FILE/tiktok_Domains_Ips_short.csv "TikTok Domains and IPs Short List file") to import only the critical domains and URLs used by the application (for example, TikTok). The domains and IP addresses listed in the csv file are up-to-date as of March 2023. You can get new and updated domains and IP addresses from the web, for example netify.com.

In the **Forensics** \> **Events \& Alerts** screen, you can view the the event reported for this application.  
![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk180749/Events&Alerts202303301152231.png)

When users access the application from the web browser, the access is blocked.  
![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk180749/Browser_app_blocked202303301154222.png)

When users try to use the app, the access is blocked.  
![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk180749/App_Browser_Blocked202303301156013.png)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content