Skip to main content
WelingtonMatias
Staff
Staff
November 13, 2025

Technical Tip: How to block Web WhatsApp file uploads and downloads using Web Filter in flow-based policy

  • November 13, 2025
  • 0 replies
  • 1727 views
Description This article describes how to block Web WhatsApp file uploads and downloads using Web Filter in a flow-based policy.
Scope FortiGate.
Solution

Create a firewall policy and enable a deep inspection profile.

 

policy-Lan-to-Internet.png

 

Then start to upload files or images to WhatsApp to generate the logs.

  whasappdestination.png

 

whasappdestination.png

 

Next, block those URLs using the URL Filter.

 

Screenshot 2026-02-09 081110.png

 

Add all these wildcards:

  • *.whatsapp-cdn-shv-02-gig4.fbcdn.net*.
  • *.graph.whatsapp.net*.
  • *.fna.whatsapp.net*.
  • *.mmg.whatsapp.net*.
  • *.cdn.whatsapp.net*.
  • *.pps.whatsapp.net*.
  • *.dit.whatsapp.net*.

 

Then, enable the web filter profile on the firewall policy.

 

policy-Webfilter.png

 

When trying to download a file, the download does not start, and when trying to send a file, the message 'Couldn't send this message' appears.

 

updown.png

 

Check the policy blocking logs.

  logblock.png

 

logblock.png

 

logblock2.png

 

Note:

It is important to create an object with UDP ports 80 and 443 and create a policy above this policy blocking QUIC connections.

 logblockQUIC.png

 

Related articles:

Technical Tip: Block WhatsApp file uploads action by using application control 

Technical Tip: Block WhatsApp file uploads using Web Filter when having the error 'Couldn't send this message'

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.