Application filtering does not work

[N_W]

Hello, even though the traffic from phones is blocked in my internet exit policy for Facebook and Instagram, and I can see in the logs that it is being blocked, end-user phones continue to have access. In my location, I have a controller device for the wireless side, and I can manage it with my PEF license, but I might face difficulties in user-based rules. What could be the reason for this? Despite blocking in the rule and seeing it blocked in the logs, why might they still have access?

[hbac]

Hi @N_W,

Please make sure QUIC protocol is being blocked by referring to this article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Block-QUIC-Protocol/ta-p/197661

Regards, 

[N_W]

Hello, my issue has been resolved. Thank you very much. What is QUIC? Why did I have to block it? My current version is 7.2.6. Just for your information. Regards.

[hbac]

@N_W, 

Are you doing deep inspection? Deep inspection is required for blocking Facebook on mobile devices. Please refer to https://community.fortinet.com/t5/FortiGate/Technical-Tip-Block-Facebook-while-allowing-Messenger/ta...

Regards,