Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
chroemerli
New Contributor

blocking web browsers

hi all we want to block certain web browsers (such as firefox, safari, chrome, opera) from accessing the internet through the fortigate firewall. in the application list I can see stuff like chrome.update etc. but I guess this only handles the updater and not the browser itself. can anyone help me with this? thanks, andreas
3 REPLIES 3
Dave_Hall
Honored Contributor

One way (and perhaps the only way) to identify a browser client is to extract the http request headers from browser traffic. As far as I am aware, the Fortigate does not have that ability. (Besides -- such header info can be faked.) What you' re requesting is better suited by using a client-side based solution (e.g. FortiClient) or other application/software based policy (including locking down workstations to prevent unwanted software from being installed) that restricts or prevents those client browsers from accessing the Internet. This is not perfect but you can always set up a user authentication method in which where you can simply edit (code) the Login or Login Challenge page to ensure the user is using a supportive browser.

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
Teemo
New Contributor

Actually there are signatures to block each browser . Here a complete list Though I think except for " HTTP.BROWSER " you need to enable " extended package" before you can use them http://www.fortiguard.com/applicationcontrol/app_pop_risk.html#name=http.browser HTTP.BROWSER.Firefox HTTP.BROWSER.Nokia HTTP.BROWSER.Dolphin HTTP.BROWSER.Flock HTTP.BROWSER.Android HTTP.BROWSER.Opera.Mobile HTTP.BROWSER.SeaMonkey HTTP.BROWSER.BlackBerry HTTP.BROWSER.IE.Mobile HTTP.BROWSER.Opera HTTP.BROWSER.Safari HTTP.BROWSER.Chrome HTTP.BROWSER.IE HTTP.BROWSER
TeemO
TeemO
Numan1982
New Contributor

hi if you want to block the browser than use carbon black application control or windows app control to block the certain applications.

Labels
Top Kudoed Authors