Blocking torrents for certain users only.

[NirdeshBhandari]

What are the steps to completely block torrents (including torrent clients/applications like utorrent, torrent websites like piratebay etc.) on all computers with an exception for 1 or 2 computers. I am using a Fortigate model FG-60C.

[emnoc]

I'm assuming you have the 2 computers with static unique address? Just create a policy for the rest of the users ( ALL ) and set a policy before this with no category controls for the 2 machines

 edit 106         set srcintf "port1"         set dstintf "wan1"             set srcaddr "INSTRUST"                       set dstaddr "all"                      set action accept         set schedule "always"             set service "ANY"                 next

 edit 107         set srcintf "port1"         set dstintf "wan1"             set srcaddr "IP-INT"                       set dstaddr "all"                      set action accept         set schedule "always"             set service "ANY"                      set utm-status enable         set application-list "INT-control"     next

and

config application list     edit "INT-control"         set comment "monitor  p2p  traffic "             config entries                 edit 4                     set action pass                         set application 10                                                  set category 2                                          next                 edit 1                         set category 2                                          next                 edit 2                         set category 8                                          next                 edit 3                         set category 19                                          next                 edit 5                         set application 12183 6 25649 30170 17042 8                                          next                 edit 6                         set application 30170 17042 30419 6                                          next                 edit 7                         set category 2                                          next             end     next end

That would cover the all  and the 2 users. Policy 106 will be your trusted address groups that carries the ip_address that you want 100% trust or allowance.