Technical Tip: How to block Snapchat using ISDB

[ssteo]

Description	This article describes how to block Snapchat using ISDB.
Scope	FortiOS.
Solution	Go to Policy & Objects -> Firewall Policy -> Create New. Name = Block Snapchat. Incoming Interface = LAN. Outgoing Interface = WAN. Source = LAN network segment. Select the destination, select Internet Service, and filter by the word 'snapchat', then choose 'Snap-Snapchat'. Action = Deny. Enable Log Violation Traffic so it is possible to view the log under the forward traffic log. Select 'OK' to save the policy. Remember to drag the firewall policy on top of the firewall policy allowing other traffic firewall policy. Under Log & Report -> Forward Traffic, it is possible to see that the firewall policy had blocked Snapchat. Below are the commands to block in the CLI: config firewall policy     edit 2         set name "Block Snapchat"         set uuid 4d201646-9d15-51f0-a26f-da8b0d768a46         set srcintf "LAN"         set dstintf "WAN"         set action DENY         set srcaddr "LAN network segment"         set internet-service enable         set internet-service-name "Snap-Snapchat"         set schedule "always"         set logtraffic all     next end