FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
KC_Hing
Staff
Staff
Article Id 219694
Description

This article describes how to deny uploading images, documents, or videos in WhatsApp web conversation by using the application control signature.

Scope

FortiGate.

Solution

In order to control web WhatsApp upload traffic that would require enabling SSL deep inspection + application control profile in the firewall policy.

 

1) Go to Security Profiles -> Application Control, select 'Profile Name' and select 'Edit'.

 

2) Inside the profile, go to Application and Filter Overrides, select 'Create New'.

 

3) Go to Action Block and Search for application signature: WhatsApp_Web_File.Upload, right mouse button and + Add Selected. 

 

KC_Hing_0-1659595155443.png

 

 

4) Enable 'QUIC' protocol option with an action block.

KC_Hing_1-1659595254418.png

 

5) Use application control profile in the firewall policy with SSL deep inspection.  

 

KC_Hing_2-1659595308204.png

 

Related articles.

https://fortiguard.fortinet.com/appcontrol/49970

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-enable-deep-inspection-and-import-t...