Proxy based Policy / not allowing microsoft and apple services to pass -> Fortiwifi 40F

[antoniocerasuolo]

Hi,

i created a wifi SSID just for test purposes because i wanted to create a proxy based policy with deep ssl inspection and DLP.  The DLP is working only in part because I'm currently unable to get it to log let alone block outgoing e-mail files ( would I need E-mail filter for this to work?) containing the keyword, HTTPS post works fine!

But the real issue with this Proxy based policy is that it's not allowing microsoft or apple services to pass.

anyone has any idea how to solve this problem?

ciao,

Antonio

[Dhruvin_patel]

Hello Antonio,

Check the FortiGate logs to identify which specific services or applications from Microsoft and Apple are being blocked by the proxy-based policy. Create specific firewall rules to allow the necessary Microsoft and Apple services to pass through the policy.

[antoniocerasuolo]

Hi Patel,

I created policies for apple and microsoft services with the FQDN wildcards for those apple and microsoft services and up to now it seems to be working perfectly!

will keep monitoring the situation.

ciao,

Antonio

[Dhruvin_patel]

Hello Antonio, Glad to hear!