Troubleshooting Tip : Block Remote Access Category when TLS is allowed in Application and Filter Overrides

[akushwaha]

Description	This article explains how to block Remote Access Category by Application Control profile when TLS is allowed in Application and Filter Overrides.
Scope	FortiGate.
Solution	In the below Application Control Profile, the Remote Access Category is blocked, and TLS is allowed : Even when the Remote Access category is blocked, the AnyDesk application is allowed  in the following logs: To block Remote Access Category even when TLS is allowed in Application and Filter Overrides. Add another rule under the 'Application and Filter Overrides' section, select 'Create New' in this section, select the 'Filter' type at the top of the 'Add New Override' panel. Add the 'Remote Access' category in the 'Filter' entry and select 'OK' to create the new rule. Select all the popularity (selected 1 star to 5 stars) to avoid the error messages: Make sure the newly created rule is placed with a higher priority than the TLS rule: Afterwards AnyDesk application will be blocked by the Remote Access Category: