Skip to main content
mhekscrip
New Member
January 26, 2017
Question

Fortigate 90D web filtering problem

  • January 26, 2017
  • 4 replies
  • 6289 views

Hi All,

 

Sorry I'm newbee here at this firewall. Kindly help me how to solve this issue. This past days the link shown in the pics is making our network very slow and sometimes packets are lost. I tried to put all restriction on web filtering and application control but still very persistent. does anyone here encounter this and solve the issue?

 

Thanks for the help

    4 replies

    hmtay_FTNT
    Staff
    Staff
    March 31, 2017

    Hi mhekscrip,

     

    Those sessions are coming from users trying to access Google services. gvt*.com is YouTube related. Did you set the Application Control signatures "QUIC" and "YouTube" to block? The other 2 indicates that users are trying to upload a file onto the servers.

     

    You have 2 options here.

     

    1. Block the Google services like Gmail, Google.Docs, etc and prevent access to those services. The bad thing is you prevent users from accessing the services entirely.

     

    2. Block the Upload/Download component of those services. The con is you have to enable deep-inspection.

     

    HoMing

     

     

    NotMine
    Explorer III
    April 2, 2017

    You can also use traffic shaping to limit the amount of bandwidth specific users and/or applications can use.

    ede_pfau
    SuperUser
    SuperUser
    April 2, 2017

    Any chance you use a ADSL line? In this case even a moderate upload can starve the download link. Apply traffic shaping "per IP" for this host to regain control.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT