Opera Mini browser iPhone

[Jasonhilt]

Anyone know how to block this from bypassing our web filter?  We have a 1240B running 5.0,build0310 (GA Patch 11).

Opera Mini completely bypasses all filtering and allows access to porn, which is unacceptable on a school network.

[jintrah_FTNT]

Hi,

It is better to block the opera mini application itself from being used. Opera mini may use its own port and encryption to contact opera servers to provide better browsing experience for end user.  A use of app control/ ips signature ("HTTP.BROWSER_Opera.Mobile")  can  be used to control/block the traffic. Have ssl deep inspection enabled in the firewall policy and  also allow only standard ports 80/443 for web traffic.

Regards,

[nbctcp]

If using Mikrotik here the rule. I want to know how to convert it into fortigate

Mikrotik: /ip firewall address-list add address=12.12.12.0/24 list=LAN /ip firewall layer7-protocol add name=opera regexp="^.+(opera-mini.net).*\$" /ip firewall filter add action=drop chain=forward layer7-protocol=opera src-address-list=LAN