Allow users to get to Microsoft but nothing else

[cfraser]

Hi, 

We are a school using FortiGate on v7.4.7. 

We have recently updated our Office package from 2016 to O365, which needs the users to have a licence to be able to access the Office apps. 

With exam season coming up, we need to set up a web filter to allow users to authenticate against O365, but not access anything else on the web. Has anyone successfully done this? Our web groups are based on a security group from on-prem AD. 

We do block Edge, Chrome and IE via GPO, but the exam board are quite strict about restrictions schools have. 

Thanks, 

Cameron

[akumar02]

Hello @cfraser ,
You can use ISDB for Microsoft in the Policies and block everything else. 
Make sure you have the DNS policy allowed above the ISDB policy. 
https://docs.fortinet.com/document/fortigate-cnf/latest/administration-guide/613009/internet-service...

[iamakk]

Hello, you can create the dedicated firewall policy to achieve this and it will allow to connect only office 365 and other internet will remain block.