How to create a proper WhatsApp rule?

[el_kily]

Hi! Im struggling to construct a proper whatsapp rule. Have 3 different lines to catch all the traffic since with only one it was impossible.

The first rule is destination "Meta-Whatsapp", nothing else since no service can be elected using that way.

Then have to create a second rule to catch TCP & UDP 3478, since have a lot of blocks without that one.

Finally, have to add whatsapp_com and _net wildcard. No much traffic on that one but have to add it.

Im running FortiGate 7.4 with all licenses.

Thanks to all!

[yderek]

HI, @el_kily 

Can you be more specifiy are you trying to block the whatsapp ? Is that whatsapp application or web based whatsapp ? 

[el_kily]

It´s the application, sorry not to mentionate it.

[yderek]

@el_kily what type of control are you trying to do for WhatsApp? 

like, block uploading the image or block voice call etc  ? 

[el_kily]

The goal is to a unique rule or at least, a best practice to enable this service, instead of having a bunch of rule.

This fortigate has application control among others licenses.