Skip to main content
HS08
Valued Contributor
Sep 25, 2024 3:32 AM UTC
Question

Whitelist Application Control

Hello,

 

Our user need access to 3rd party application via VPN, they use Sophos VPN for VPN client.

This traffic is blocked by fortinet because of the application control, then i make 'application and filter overrides' for OpenVPN and the user is able to connect to the VPN now.

With this condition the user can access to any OpenVPN address. Now can we restrict to only allowing use OpenVPN if the destination set to 'vpn.mycomain.com' and block the rest?

 

f2.pngf1.png

 

 

4 replies

hulonjo1
New Member
Sep 25, 2024 5:52 AM UTC

Maybe wdac/app control for business is a step to far? I know that msft doesn't recommend using applocker... as no one investments will be made to improve applocker... but if you want to deploy a basic app control policy, you can take a look at my older blog about applocker

amuda
Staff
Staff
Sep 25, 2024 8:00 AM UTC

Hi @HS08 

 

You may set the destination in the firewall policy with this App Control profile enabled to 'vpn.mycomain.com'.

NoraSandoval
New Member
Oct 4, 2024 6:14 AM UTC

Thank you for being so helpful.

NylaFlores
New Member
Nov 13, 2024 11:13 AM UTC

Thank you, I will check it.

Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024