How to block Chrome extensions with Fortigate 60E

Forum|Forum|7 years ago
November 12, 2018
1 reply
24020 views

Hello All,

I have a serious security issue and need your help to solve it.

I have a Fortigate 60E securing Internet access, I'm using Security profile to block unwanted websites and applications and it's working fine except for Chrome extensions. I found that some users are using Hoxx and Windscribe extensions for chrome.

They are able to bypass our security rules and connect to some sites that are blocked by Company's policy.

Could you please help me finding a solution for that.

Thanks and kind regards,

Gr1n3

Best answer by stanislav_timofeev

Hi.

To block this you may simply create Application Control profile with these apps blocked (or "Proxy" category at all) and apply it on your lan-to-wan firewall policy.

Fortinet already has signatures for these applications.

https://fortiguard.com/appcontrol/42312/hoxx-vpn

[link]https://fortiguard.com/appcontrol/43625/windscribe[/link]

stanislav_timofeevAnswer

New Member

Hi.

To block this you may simply create Application Control profile with these apps blocked (or "Proxy" category at all) and apply it on your lan-to-wan firewall policy.

Fortinet already has signatures for these applications.

https://fortiguard.com/appcontrol/42312/hoxx-vpn

[link]https://fortiguard.com/appcontrol/43625/windscribe[/link]

Gr1n3Author

New Member

Hi Stanislav,

Thank you for your reply, as I said earlier, I already added the two signature to the Security profil => application Control => Add signature. by doing this the hoxx and windscribe desktop application were blocked successfully however the chrome extensions are still working :(

Kind regards,

Gr1n3

stanislav_timofeev

New Member

Do you have deep ssl inspection enabled?

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded