Technical Tip: Block TikTok with a block message

[Dongfang_Li_FTNT]

Description	This article describes how to block TikTok and displaying a block message.
Scope	FortiOS, FortiGate
Solution	See this article for instructions on how to block TikTok with the web filter alone. The web filter may not be the preferred option to fully block TikTok because some foreign countries have no keyword ‘TikTok’ in the URL. However, application control can block TikTok by signature. When web filter, application control, and SSL deep inspection are enabled in the same firewall policy, application control will trigger first and block the connection. To block TikTok using an application signature, navigate to Security profiles -> Application Control, and select the correct profile. Under Application and Filter overrides, select Create new and search for the keyword TikTok. This will show all the relevant signatures for TikTok. Select all the signatures requires and set the action to Block and save the changes. Now this profile can be added to the firewall policy where TikTok needs to be blocked. Application control can block traffic in both flow-based and proxy-based inspection mode policies: Policy in flow base inspection mode: FortiGate will send a block message showing that the TikTok connection is blocked by application control. Policy in proxy inspection mode: FortiGate will not send a block message after the connection is blocked.   Solution: change the policy inspection mode to flow-based inspection mode. config firewall policy edit <id> inspection-mode flow end