FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
saleha
Staff
Staff
Article Id 304195

Description

 

This article describes why users are unable to access Facebook, Meta, Instagram, and/or WhatsApp URLs after performing a Google Chrome update to version 122.0.6261.112.

 

Scope

 

FortiGate, FortiOS (all recent versions).

 

Solution

 

This issue occurs because Meta apps have changed the encoding method to 'zstd', which is not supported by the following current versions of FortiOS.


Check for details and solution: Technical Tip: FortiGate and ZSTD implementation (for example Meta: Facebook, Whatsapp, Instagram bl...

  • This problem is also present in internet access through the FortiSASE portal.
  • To test if this issue is due to the encoding change, try the following:

 

  1. Access the same websites through Firefox or Microsoft Edge.

  2. Check the traffic logs: they should show these sites are 'blocked by UTM' while the application name is detected as 'SSL' (assuming the SSL category is not blocked under the firewall 'application control' profile for other reasons).

Solutions to remediate this problem are presented in the article linked above.