FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
amuda
Staff
Staff
Article Id 306350
Description This article describes how to allow WhatsApp QR code to load in WhatsApp Desktop Application with Collaboration category in Application Control profile blocked.
Scope FortiGate.
Solution
  • Failed to load QR code in WhatsApp Desktop Application for login purpose:

 

amuda_0-1711956764352.jpeg

 

 

  • Debug flow shows that the traffic hit policy ID 1:

 

diagnose debug flow filter saddr 10.80.4.191

diagnose debug console timestamp enable

diagnose debug flow show iprope enable

diagnose debug flow show function-name enable

diagnose debug flow trace start 100

diagnose debug enable

 

amuda_1-1711956764375.jpeg

 

  • Debug ipsengine shows that the traffic for WhatsApp is matching a rule and being dropped.

 

diagnose debug enable all

diagnose debug ipsengine 255

diagnose debug enable

 

amuda_2-1711956764385.jpeg

 

 

  • Application Control profile is enabled in firewall policy ID 1:

 

amuda_3-1711956764388.jpeg

 

 

  • Further check on the Application Control log shows WhatsApp is blocked:

 

amuda_4-1711956764392.jpeg

 

  • Log details show that it is being blocked due to the Collaboration category in the 'WS' Application Control profile:

 

amuda_5-1711956764394.jpeg

 

 

  • The 'WS' Application Control profile shows that Collaboration is blocked (this category includes WhatsApp):

 

amuda_6-1711956764398.jpeg

 

  • Create a new entry in 'Application and Filter Overrides' for WhatsApp:

 

amuda_7-1711956764402.jpeg

 

  • Allow WhatsApp:

 

amuda_8-1711956764406.jpeg

 

 

  • WhatsApp is shown as allowed:

 

amuda_9-1711956764410.jpeg

 

  • It is possible to load QR code for login purposes in WhatsApp Desktop Application:

 

amuda_10-1711956764413.jpeg