Blocking https facebook/youtube

[SAK_Security]

I found lots of guides on the forums that concerns blocking these particular two websites. The problem is, the best guide I found is on the following url: 

http://cookbook.fortinet.com/blocking-facebook-52/

This method will block all https websites, including google and other useful websites. The problem with Facebook, youtube, twitter and most https websites is that even if you types the website using http format it will redirect into the https version and hence bypass and web-filtering rules and policies.

My question is, is there any clear way using the fortigate (200D specifically) that enables the administrator to ban the users from a number of specified https websites?

[hmtay_FTNT]

Hello,

>>This method will block all https websites, including google and other useful websites.

If you are seeing all HTTPS sites blocked, you have most likely enabled deep-inspection without importing the right Certificate.

If you only set add the Facebook and Youtube domain in the Web Filter, other sites will not be affected. If you enabled certificate-inspection, the Fortigate will scan the SSL sessions for the host name and block them even if they are redirected from HTTP.