Troubleshooting Tip: Block Remote Access Category when TLS is allowed in Application and Filter Overrides
| Description | This article explains how to block Remote Access Category by Application Control profile when TLS is allowed in Application and Filter Overrides. |
| Scope | FortiGate. |
| Solution | In the below Application Control Profile, the Remote Access Category is blocked, and TLS is allowed:
Even when the Remote Access category is blocked, the AnyDesk application is allowed in the following logs:
To block Remote Access Category even when TLS is allowed in Application and Filter Overrides.
Make sure the newly created rule is placed with a higher priority than the TLS rule:
Afterwards AnyDesk application will be blocked by the Remote Access Category:
Note the order of inspection in the application Control. Initially, it checks the Application and Filter Overrides in the top to bottom order of the list, then it checks the categories. |




