Cannot block access to https://www.facebook.com

[FgjNet]

Hi, we have problems with blocking HTTPS trafic (block access to Facebook) on our Fortigate 60C. It looks like that SSL inspection (Deep Scanning) is not working. We were able to block access to Facebook (https) in version 5.0.3 - but we had to downgrade it due to high memory consumption in version 5.0.3. So, now we are running ver 4.0 MR3 patch 14 (v 4.0 build665,130514) version of FortiOS - but we cannot block access to https://www.facebook.com. We are using Web filtering (Fortiguard categories). AFAIK all setting should be OK - check the screenshoots. Any ideas? Thank you for your feedback.

[simeon]

sir and also my problem is the internet connection will be slow.. when i disable the fb and youtube proxy my internet is very slow now. what can i do

[Bromont_FTNT]

when you update the firmware you don' t need to configure again... it is always advisable to backup your configuration before upgrading and after making changes. You should probably open a support ticket regarding the slow internet issue.

[simeon]

sir bromont where can i get the latest firmware update?? / firmware images or firmware image checksums thanks.

[Bromont_FTNT]

you log into the support site and the images are under: Download ---> Firmware Images ---> Fortigate ---> v5.00 ---> 5.0 ---> 5.0.4

[simeon]

sir is it possible to update the firmware to patch 4. no need install na previous patch like patch 2and 3

[Bromont_FTNT]

Read the release notes which are in the firmware directory... see page 16 of that pdf

[simeon]

sir bromont my all my p2p now is block tnx a lot.. how about the policy for the time lets say from 7-8 am they can use fb. then from 8-4pm block again ill try to make a ill try to make schedules on firewall then create a policy but not working how can i??

[simeon]

sir good day ... are you familiar with the hotspot shield/???? they can open the block application using hotspot shield.

[simeon]

Sir, Bromont thanks a lot i called the technical support they said that i need to upgrade to patch 2 before i upgrad to 4 tnx a lot

[Bromont_FTNT]

You need several firewall policies for the different schedules. I haven' t tried blocking Hotspot Shield myself but try using Application Control