Skip to main content
Nark0t
New Member
June 20, 2019
Solved

Schedule for Social media sites

  • June 20, 2019
  • 3 replies
  • 9731 views

Hi,

 

I don't know i this is possible, but I am trying to setup a schedule that blocks only facebook and social media traffic at certain times for specific users, but allows all other services during those times. for example:

 

users have access to allowed internet services but are only allowed to access facebook between 8:00-9:00am in the mornings and 12:00-13:00 in the afternoons. I have setup schedules and schedule groups and we use FortiSSO for user authentication however I cant seem to get it working as when I enable the schedule it blocks all internet access except for those times.

 

Thanks in advance :) 

    Best answer by hubertzw

    So, the policy order is:

    1) FB_Access with specific group (for those who can access FB in specific time) - action permit

    2) Block-FB with specific group (not sure what is the policy name) - action block

    3) Internet - action permit

     

    With FSSO it should work

    3 replies

    hubertzw
    New Member
    June 20, 2019

    do you have 2 firewall policies? one should be with time control for the FB and the second for the Internet with permit without time control

    Nark0t
    Nark0tAuthor
    New Member
    June 20, 2019

    Hi I do have 2 policies, however realized I should provide better over view of my policies:  

     

    I have groups for Full access, limited access and no access with users assigned to each group and allowed services are always open on those groups.

     

    Now I want to take specific users that are in the Limited access group and only allow Facebook access at specific times but not affect other internet services.

    What I have done is created a Limit_FB group on my AD and added them as member of the group as well as keep them on the limited access group.

    I have created a FB_Access policy and setup a schedule for that policy. I have taken the same web filtering and app control profiles as the limited access group and just blocked social media in those profiles and placed the policy above the limited access policy.

    this should technically work correct?

     

    Hope this makes sense

    hubertzw
    hubertzwAnswer
    New Member
    June 20, 2019

    So, the policy order is:

    1) FB_Access with specific group (for those who can access FB in specific time) - action permit

    2) Block-FB with specific group (not sure what is the policy name) - action block

    3) Internet - action permit

     

    With FSSO it should work

    TawannaVidovich
    New Member
    July 28, 2021

    I totally agree with you

    hardep457
    New Member
    October 28, 2021

    this will work. i am agree with you