Block Windows Store on Clients

[ITguru]

Hi,

We use Windows 10 Pro in our environment and I want to block the access to the "Windows Store" app.

I dont want the users to download and install any applications from windows store.

I tried to block the Windows Store with the Application "Microsoft Store" on my Fortigate, but the Store still loads.

How can I block connections of the Windows 10 Store?

Thanks and have a good Day

[EMES]

Are you decrypting traffic? It might be needed to block that application.

[hmtay_FTNT]

Do you have a packet capture? If you can get one, I can take a look to see why did it not block. Did the signature show up on the logs?

[emnoc]

Better yet diag debug flow, did you  hit the expect fwpolicy ?

[ITguru]

Hi

Thanks for your responses. 

I am not decrypting the traffic currently. I will try his.

Unlikely we got our Fortigate pretty new. I am not that familiar with cli possibilities for debugging right now.

I will try the decryption first. Maybe some of you could give me an advice how to debug this communication.

Thanks!

[MikePruett]

Run some packet captures and if at all possible SSL decrypt so you can see the true packet contents. For decryption you will need to push the cert the Gate uses to the computers so you won't receive the ssl certificate error in the browser.