Whitelist Application Control

[HS08]

Hello,

Our user need access to 3rd party application via VPN, they use Sophos VPN for VPN client.

This traffic is blocked by fortinet because of the application control, then i make 'application and filter overrides' for OpenVPN and the user is able to connect to the VPN now.

With this condition the user can access to any OpenVPN address. Now can we restrict to only allowing use OpenVPN if the destination set to 'vpn.mycomain.com' and block the rest?

[hulonjo1]

Maybe wdac/app control for business is a step to far? I know that msft doesn't recommend using applocker... as no one investments will be made to improve applocker... but if you want to deploy a basic app control policy, you can take a look at my older blog about applocker

[amuda]

Hi @HS08 

You may set the destination in the firewall policy with this App Control profile enabled to 'vpn.mycomain.com'.

[NoraSandoval]

Thank you for being so helpful.

[NylaFlores]

Thank you, I will check it.