Allow Ultraviewer only.

[harshadmistry]

Hi,

How do I Allow Ultraviewer only. 

I have create the policy to restrict all internet access and only wants to allow Ultraviewer desktop app only

[srajeswaran]

You can create a policy with application control and allow Ultraviewer - https://www.fortiguard.com/appcontrol/48424 and then create another policy in same context/direction and action as block.

You may use application control profile or the NGFW firewall-mode "policy-based" and call the application directly on the policy - ref : https://docs.fortinet.com/document/fortigate/7.0.2/administration-guide/978598/profile-based-ngfw-vs...

[pavankr5]

Hello @harshadmistry,

Create a new firewall policy with the following settings:

• Set the source address to the desired source (e.g., specific user or IP address range).
• Set the destination address to "All" or the specific IP addresses/URLs associated with Ultraviewer servers.
• In the Application section, select "Custom" or search for "Ultraviewer" in the application list and add it to the policy.
• Set the service to "Ultraviewer" or specify the required ports used by Ultraviewer
• Set the action to "Accept".
• Save
  
  traffic originating from the specified source addresses and destined for Ultraviewer servers will be allowed, while all other internet access will be restricted. Make sure to test the policy  to ensure that Ultraviewer is functioning as expected while other internet traffic is blocked.

Thanks,

Pavan