Is there a way to allow external connection to a single application?

[serveiwebs]

Hi,

I am using ForgiGate with Fortios 6.4 and I need to close all my Interenet outgoing connections but allow the ones that Anaconda (python development environement) uses. Anaconda connects via port 80 and 443 to internet, but the destination domains are not fixed, as the app asks for existant repositories and this destinations url are constantly changing and they count for dozens every connection.

The question is, if there is some way to allow Anaconda traffic, as I don't see how can I parametrize it for to be identified and allowed by the FortiGate. I have checked in FortiGuard for in case this app is categorized, but the results are empty:

https://www.fortiguard.com/search?q=Anaconda&engine=1



Thanks a lot

[xsilver_FTNT · Accepted solution]

Hi,

it seems to be not known through FortiGuard Application Control.

Feel free to submit it to get it categorized via https://www.fortiguard.com/faq/appctrlsubmit 

Once categorized you cold build custom Application Control Sensor with Application Filter Overrides set to allow just that app.

BTW: FortiOS 6.4 is going to be out-of-support in September 2024 - https://support.fortinet.com/Information/ProductLifeCycle.aspx
Therefore I'd suggest to start thinking about migration to 7.x as there are some fundamental changes in 7.x FortiOS .. more in Release Notes.

[serveiwebs]

Thanks xsilver,

I have submitted ANACONDA app, as per your experience...how many time can take to be processed the submitted app (and hopefully aproved)?

Thanks.