Hot!Blocking https facebook/youtube

Author
SAK Security
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/10/04 00:17:41
  • Status: offline
2017/10/04 01:22:38 (permalink)
0

Blocking https facebook/youtube

I found lots of guides on the forums that concerns blocking these particular two websites. The problem is, the best guide I found is on the following url: 
http://cookbook.fortinet.com/blocking-facebook-52/
 
This method will block all https websites, including google and other useful websites. The problem with Facebook, youtube, twitter and most https websites is that even if you types the website using http format it will redirect into the https version and hence bypass and web-filtering rules and policies.
 
My question is, is there any clear way using the fortigate (200D specifically) that enables the administrator to ban the users from a number of specified https websites?
#1
hmtay_FTNT
Gold Member
  • Total Posts : 209
  • Scores: 26
  • Reward points: 0
  • Joined: 2017/02/22 11:02:10
  • Status: online
Re: Blocking https facebook/youtube 2017/10/05 08:25:52 (permalink)
0
Hello,
 
>>This method will block all https websites, including google and other useful websites.
 
If you are seeing all HTTPS sites blocked, you have most likely enabled deep-inspection without importing the right Certificate.
 
If you only set add the Facebook and Youtube domain in the Web Filter, other sites will not be affected. If you enabled certificate-inspection, the Fortigate will scan the SSL sessions for the host name and block them even if they are redirected from HTTP.
#2
Jump to:
© 2017 APG vNext Commercial Version 5.5