Block Instagram app

[mateusguilherme]

Is it possible to block the Instagram app without having to block the entire QUIC protocol? I also can't enable "deep-inspection" because it will cause certificate errors for users (FortiOS 7.4.8).

[ElwinBERRAR]

Blocking Instagram reliably without deep inspection is tough, because the app shifts between QUIC, HTTPS and multiple CDN endpoints. Without SSL inspection you can use the Social Media category, but it won’t give you a 100% block rate.

[mateusguilherme]

Apparently, blocking port 443 over UDP solved the problem.

[ezhupa]

Hello,

Did you try blocking the Instagram Signature in the APPCTRL application override?
If you block the signature itself, the APP should be blocked by the application control profile.
Just make sure the traffic is matching the correct firewall policy.

Hope this helps!

[mateusguilherme]

Yes, I tried, but since the Instagram app uses QUIC, it continues to work even with Application and Filter Overrides.