Allow Software Updates via Google Play

[nosiop]

Hello!

Need Help!

I have subnet for mobile devices. I need that in mobile devices work only whatsapp, telegram, ZOIPER VOIP and Google Play for Updates.

In Fortigate Policy I allow (Application Control): telegram, whatsapp, Zoiper Voip App and Google Play (Dependecies Google Accounts, Google Login, Google Login Personal, Google Login G.Suite also allowed). In SSL Deep Inspection Profile excepted addresses *play.google.com, *googleapis.com, *.ggpht.com, *.googlevideo.com, wildcard.google.com.

So, Whatsapp, telegram, zoiper working fine, but Google Play not working.

What am I doing wrong? May be App Signature Google Play not working/need update?

[chethan]

Hello,

Have you enabled logs on your firewall policy? did you notice anything there?

or else, you can allow all google services for testing and check what services and ports were used by google play in the logs?

and later configure application control profile.

Thank you

[mhe]

I tried to implement exactly this for a client some time ago. Unfortunately, this never worked reliably, even with the help of Fortinet support.