FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
rtichkule
Staff
Staff
Article Id 255167
Description This article describes how to block Dropbox using an application signature.
Scope FortiGate.
Solution

Verify that the application control database has been updated.

By viewing the link below, it is possible to view the version:
Technical Tip : How To Upgrade Application Control... - Fortinet Community.

 

Navigate to Application Control in the security profiles section after the database has been updated.

Create a new application and filter override:

 

dropbox add.png

 

 

Search for Dropbox signature.

 

overrride.png

 

Select the signature and then choose the required action. 

 

Over here we will be allowing downloads and blocking uploads. To inspect the traffic we will have to use deep packet inspection in the firewall policy.

 

Remove the Dropbox exemption from the SSL/SSH Inspection. 

 

SSL-ssh exemption.png

 

Apply the application control on the firewall policy after completing the aforementioned steps.

 

 

Screenshot 2024-08-26 151517.png

 

 

 

From the below result we can see that the file upload status is 'In queue':

 

Result.png