navigation problems in fortigate

[unknown1020]

friends a question.

I've been having navigation issues on my fortigate, specifically regarding a policy that gives internet access to a segment. Reviewing in detail, the problem was due to the pages being accessed belonging to a category (application control) that was blocked. To correct this problem, I enabled the allow option in the category.

The strange thing is that this category was always blocked in the application control profile and users accessed the pages normally. This problem arose out of nowhere, it is worth mentioning that the security profile was not modified.

Do you know why this problem occurs?

[fricci_FTNT]

Hi @unknown1020 ,

The issue you are experiencing might be similar to the one described in the post https://community.fortinet.com/t5/Support-Forum/Facebook-blocked-and-not-blocked-with-same-policy/m-...and it might be due to the fact that the client is using "Encrypted Client Hello" (ECH) [https://blog.cloudflare.com/announcing-encrypted-client-hello | https://datatracker.ietf.org/doc/draft-ietf-tls-esni/ ]. 

Best regards,