Limit access to the AppStore

[trixxmanaty]

Dear All,

Please assist on how to limit access to the Apple AppStore on Fortigate 60D. I would like to allow staff to access the AppStore only after 1300hrs till 0600hrs then block access from 0700hrs till 1300hrs. 

Any help is greatly appreciated.

[Shawn_W · Accepted solution]

I found this.  It might be a good place to start.

http://www.google.com/url?sa=t&rct=j&q=&esrc=s&frm=1&source=web&cd=5&cad=rja&uact=8&ved=0CDUQFjAE&ur...

[Shawn_W · Accepted solution]

I found this.  It might be a good place to start.

http://www.google.com/url?sa=t&rct=j&q=&esrc=s&frm=1&source=web&cd=5&cad=rja&uact=8&ved=0CDUQFjAE&ur...

[vmartin_FTNT · Accepted solution]

Hi trixxmanaty,

In order to block the AppStore during 0700hrs till 1300hrs, you will need to create a policy that uses a schedule for that time period, and has an Application Control policy that uses the Apple.Store signature to block the AppStore. You will need another policy that does not block the AppStore, which will be used the rest of the time.

The policy that blocks the App Store should be higher in the policy list, to make sure it is applied to the right traffic.

[Christopher_McMullan]

You'll also want to set the following parameter in the scheduled policy, to ensure sessions are subject to the other rule outside of that time (i.e., sessions opened until the App Store policy will not survive outside of that time range): set schedule-timeout enable

[vmartin_FTNT]

Because I thought this was an interesting use case, I wrote a recipe for it on the Cookbook site! Controlling access to Apple's App store

[FatalHalt]

Cool to see the process of these troubleshooting threads be turned into documentation! 

[vmartin_FTNT]

I keep an eye on the forums to see if anything comes up that would be a good fit for a recipe.