android phone want to block fromfortigate

[pbhandary98]

we have implemented a policy in the application filter to block the mobile category and applied application signature android block . However, access is still occurring from mobile devices. please help me resolve th issue 

[kaman]

Hi pbhandary98,

What is the firmware version of the device?

In firewall policy, try to change the inspection mode to proxy and block the Quic protocol signature under Application control and then check the behaviour.

In the newer version, this might require Deep Inspection (Full SSL Inspection).

Please go through the article below:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Usage-of-Application-Control-to-block-Mobi...

Let us know if this helps.

If you have found a solution, please like and accept it to make it easily accessible to others.

Regards,
Aman

[vangua2]

Internet of Things (IoT) detection is a subscription service that allows FortiGate to detect unknown devices in FortiGuard that are not detected by the local Device Database (CIDB). When the service is activated, FortiGate can send device information to the FortiGuard collection server. When a new device is detected, FortiGate queries the results from the FortiGuard query for more information about the device.