Description | This article describes that some applications got denied by Application Control with 'HTTP.Browser - Deny: UTM Blocked' |
Scope | FortiGate. |
Solution |
The application failed to connect to the registration server:
The security events of Application Control are shown below:
The log details show that non-default port 2290 (TCP) is used by the application.
' 'Block applications detected on non-default ports' is supposed to be enabled to allow the HTTP connection with a non-default port. Go under Security Profiles -> Application Control -> [Application Control Profile] -> Options and disable 'Block applications detected on non-default ports'.
To disable it in the CLI:
config application list edit <Profile_Name> set enforce-default-app-port disable end
The application connects to the registration server successfully.
The security events of Application Control are shown below:
Related article: |