High bandwidth consumption in block App Control

[CVB1]

Good morning, I have 1 user who has Facebook blocked but I see a lot of bandwidth consumption, shouldn't I not have that consumption when being blocked? Attached capture.

Thanks

[lgupta]

Hello,

Please share the FortiOS version, CLI Output of Application Control Profile, and the firewall Policy to which this application control is applied.

[asoni]

Hello,

Can you please check application control logs only for this single user and check blocked data sent/receive bytes for 24 hours and provide screenshot. 

Thank you

[ap]

Hi @CVB1,

I tried to replicate blocking Facebook using application control and flow-based policy.

I was able to see similar sent and received data bytes as yours. So, It doesn't seem to be an unexpected output.

Below are screenshots of my lab replication logs:

Regards,
AP