Cannot block access to https://www.facebook.com

[FgjNet]

Hi, we have problems with blocking HTTPS trafic (block access to Facebook) on our Fortigate 60C. It looks like that SSL inspection (Deep Scanning) is not working. We were able to block access to Facebook (https) in version 5.0.3 - but we had to downgrade it due to high memory consumption in version 5.0.3. So, now we are running ver 4.0 MR3 patch 14 (v 4.0 build665,130514) version of FortiOS - but we cannot block access to https://www.facebook.com. We are using Web filtering (Fortiguard categories). AFAIK all setting should be OK - check the screenshoots. Any ideas? Thank you for your feedback.

[simeon]

sir bromont. the hotspot.shield is blocked. sir my question is how can i make a policy for the time lets say from 7 am to 8 am they can open the fb. then 8 to 4 blocked how??

[ZeroInterrupt]

Configure an app control monitor, worked great for me.

[angvkiat77]

hi, i am using fortigate 80C, firmware 5.0.4. i managed to blocked www.facebook.com, both http and https, using SSL inspection and web filter local categories. now i have another issue, i want to allow skype, but with SSL inspection, i cant login to skype. removing SSL inspection, i can login, but https://www.facebook.com will be accessible. i know i cant simply set a whitelist url filter for skype sites as there is no fixed url/ip for skype login. i thought of creating another policy without ssl inspection on top of the current one, to allow skype, but since i cant create a whitelist for skype sites, i dont think that will work. any idea?

[TuncayBAS]

Please read: https://forum.fortinet.com/FindPost/105004

[bobm]

https://www.facebook.com https://www.youtube.com https://www.myspace.com https://www.twitter.com etc...... Even have Web Site Filters specifically added in the UTM profile and it' s still getting past.