Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
BillyBragg
New Contributor II

Google Drive App Does Not Sync With Web App

Greetings -

Sometime within the last couple of weeks, our users' Google Drive App stopped syncing with the Web App and vice versa.

  • I set up a Google Drive account as a test and couldn't even sign in.
  • We removed SSL inspection from our firewall policy for a minute and everything started working.
  • Adding an an exemption in SSL inspection for *.google.com did not fix the issue.

Note: We are a Mac environment. 

Any advice would be welcome.

Thank you in advance!

FortiGate 

1 Solution
BillyBragg

When you said, "google drive would query other fqdn in the background as well such as *.gstatic.com and etc" that prompted some further investigation along those lines. We ended up doing a *.googleapis.com exemption and that fixed the issue.

View solution in original post

3 REPLIES 3
jiahoong112
Staff
Staff

The SSL inspection that you were using, was it regular certificate-inspection or deep-inspection? That aside, what security profiles did you have Enabled on the specific firewall policy? Adding an ssl exemption for *.google.com as google drive would query other fqdn in the background as well such as *.gstatic.com and etc. Ensure that your firewall policy is logging all traffic, check the Forward Traffic and Security Event logs after reproducing the issue. 

 

An alternative would be to create a firewall policy without any security profiles with Google ISDB objects as the Destination Address: https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/179236/using-internet-servic... 

**If you come across a resolution, kindly show your appreciation by liking and accepting it, ensuring its accessibility for others**
BillyBragg

When you said, "google drive would query other fqdn in the background as well such as *.gstatic.com and etc" that prompted some further investigation along those lines. We ended up doing a *.googleapis.com exemption and that fixed the issue.

hbac
Staff
Staff

Hi @BillyBragg,

 

When it is not working, please check SSL logs to see if it is being dropped. 

 

Regards, 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors