User group creation

Forum|Forum|9 years ago
July 2, 2017
4 replies
4895 views

I have fortinet 30E, but i haven't active directory.

then how can i create group and block YouTube specific user

pls tel me.........

EMES

New Member

You can block by source ip or authenticate all your users by creating local users on the firewall. You would put the users in your outbound security policy.

xsilver_FTNT

Staff

Hi yathu,

how about local user groups on FGT and then their use in firewall policy + web/url filters ?

Regards,

Tomas

yathuAuthor

New Member

Hi

I struggled to create user group to block youtube

can you explain step by step

please.........

xsilver_FTNT

Staff

1. create local user group on FortiGate

2. follow http://cookbook.fortinet.com/blocking-facebook-52/

3. replace facebook.com with whatever you need to block

4. in cookbook receip step 3 add the group to the policy

5. make sure there is no other policy allowing unauthenticated traffic (as there is implicit fall-through for unauthenticated and such pure IP based non-identity policy will win the policy match challenge)

6. use 'diag debug flow' group of commands and 'diag sys session list' to verify your traffic is comming through intended policies

Sign up

Login with SSO

Login to the community

Login with SSO