Skip to main content
serveiwebs
Explorer
August 28, 2023
Solved

Is there a way to allow external connection to a single application?

  • August 28, 2023
  • 2 replies
  • 1907 views

Hi,

 

I am using ForgiGate with Fortios 6.4 and I need to close all my Interenet outgoing connections but allow the ones that Anaconda (python development environement) uses. Anaconda connects via port 80 and 443 to internet, but the destination domains are not fixed, as the app asks for existant repositories and this destinations url are constantly changing and they count for dozens every connection.

 

The question is, if there is some way to allow Anaconda traffic, as I don't see how can I parametrize it for to be identified and allowed by the FortiGate. I have checked in FortiGuard for in case this app is categorized, but the results are empty:

https://www.fortiguard.com/search?q=Anaconda&engine=1

USERGROUPS.png

Thanks a lot

Best answer by xsilver_FTNT

Hi,

it seems to be not known through FortiGuard Application Control.

Feel free to submit it to get it categorized via https://www.fortiguard.com/faq/appctrlsubmit 

Once categorized you cold build custom Application Control Sensor with Application Filter Overrides set to allow just that app.

 

BTW: FortiOS 6.4 is going to be out-of-support in September 2024 - https://support.fortinet.com/Information/ProductLifeCycle.aspx
Therefore I'd suggest to start thinking about migration to 7.x as there are some fundamental changes in 7.x FortiOS .. more in Release Notes.

 

2 replies

xsilver_FTNT
Staff
Staff
August 28, 2023

Hi,

it seems to be not known through FortiGuard Application Control.

Feel free to submit it to get it categorized via https://www.fortiguard.com/faq/appctrlsubmit 

Once categorized you cold build custom Application Control Sensor with Application Filter Overrides set to allow just that app.

 

BTW: FortiOS 6.4 is going to be out-of-support in September 2024 - https://support.fortinet.com/Information/ProductLifeCycle.aspx
Therefore I'd suggest to start thinking about migration to 7.x as there are some fundamental changes in 7.x FortiOS .. more in Release Notes.

 

serveiwebs
Explorer
August 28, 2023

Thanks xsilver,

 

I have submitted ANACONDA app, as per your experience...how many time can take to be processed the submitted app (and hopefully aproved)?

Thanks.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT