Skip to main content
pipper
pipper
New Member
August 21, 2024
Question

Block & Alow Access

  • August 21, 2024
  • 4 replies
  • 7080 views
Hi Experts,
can you help me,
What method can I use for Fortigate devices to apply multiple rules? For instance, I want to block Instagram login and similar activities, while still allowing access to Reels and posts.

4 replies

ymorohashi
Staff
ymorohashi
Staff
August 21, 2024
Application Control have the following application signature.
 
Instagram_Login
This indicates an attempt to log into an Instagram account.
Instagram Login detects and logs information of the user logging into an Instagram Account.
 
Instagram_Post
This indicates an attempt to post a message onto Instagram.
Instagram Post detects and logs the content of the posted message by the user.
 
Instagram_Video
This indicates an attempt to play videos on Instagram.
Instagram Video covers the playing of videos that are uploaded on the Instagram servers.
*I am not sure if "Instagram_Video" cover Instagram reels or not.
 
Create a application sensor and set action of the above signatures as you want.
 
If you have no specific policy to Instagram services.
You can try ISDB as destination service.
"Meta-Instagram" in Fortinet ISDB database.
 
Create a policy and set "Meta-Instagram" as destination service.
 
    pipper
    pipperAuthor
    New Member
    August 21, 2024

    If I use application control to apply a rule for blocking it doesn't work, I can only either block all Instagram services or not block them at all. Is there another method that can be applied, or do you have any suggestions?

    ymorohashi
    Staff
    ymorohashi
    Staff
    August 21, 2024
     

    Did you select my suggested signatures as override?

    appctl_example.png

      pipper
      pipperAuthor
      New Member
      August 23, 2024

      Yes, I have done that, but Instagram is still working
      Are there any other methods?

      Poseidonas
      Poseidonas
      Visitor III
      August 21, 2024

      Hello,

      Do you have DLP & SSL Available?

      pipper
      pipperAuthor
      New Member
      August 23, 2024

      Can I see the documentation to implement it?

      Poseidonas
      Poseidonas
      Visitor III
      August 23, 2024

      As I can understand from the pic that you post you don't have it. 

      Be careful with the version you have. The problem is that without the DLP you cannot restrict the in-app use of instagram in your example. You can only restrict the access via web access i.e. in Chrome by visiting the web version of instagram. :)

       

      https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/153498/data-loss-prevention

       

       

        pipper
        pipperAuthor
        New Member
        August 23, 2024

        Yes, that’s what I want. I want to restrict Instagram access through the web according to specific rules, as users are restricted from using the app. Is it possible to block access to login so that users cannot log in with their Instagram accounts, but still be able to view reels or posts through shared links?

        Poseidonas
        Poseidonas
        Visitor III
        August 23, 2024

        Yes you can do this mate :)

         

        Let's see the whole process a-z.

        • SSL (You have to buy and install SSL)
        • Setup Deep Inspection 
        • You set a new rule for Instagram and choose what users can do and what can't do.  

         

        See the image below:

        Screenshot_5.png

          Terms & ConditionsAccessibility statement