FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
HiralShah
Staff
Staff
Article Id 372508
Description This article describes how to check the application ID in the logs to allow specific applications when application control is blocking it.
Scope FortiGate.
Solution

If the application control is blocking the traffic, check the logs from: Log & Report -> Security Events -> Application Control:

 

Logs.png

 

'Double-click' on the log and log details will show up as follows:

 

image (3).png

 

It will allow this application ID mentioned in the logs (Here 15895) from the application control profile which is mentioned in the specific policy ID (Here it is policy ID 47).

 

In the Security profile, select the specific Application control profile, scroll down to Application and filter override: 

 

Application_control1.PNG

 

Hit 'Create New' and it will open the following tab: 

 

Allow_appication.PNG

 

Check again and the application should be allowed. 

 

Via CLI:

 

config application list
    edit <profile name>
        config entries
            edit 0
                set application 15895
                set action pass
            end