Captive Portal Viber Exempt

[Brandy]

Were Using viber on our office workstation sometimes they using internet. is there a way to exempt viber on Captive portal? I tried to put HTTP, HTTPS even all TCP on exempt destinations and services but doesn't work

FortiGate 

[AEK]

You probably forgot to exempt DNS traffic (UDP 53).

[Brandy]

I tried it but still not working I did not know if this is correct.

 I add DNS on exempt services on interface, Then I create a 2 policy 

112 - policy to allowed DNS on port 9 and I clicked the exempt on top of my policy 111

111 - policy allowed user to access internet 

[kendall3]

In order to see the URL being accessed, you need to do deep SSL inspection on the traffic, which runs contrary to standard guest access approaches. (if you have the opportunity to install your own root CA to a client machine, I wouldn't consider that to be a random guest device anymore) https://speedtest.vet/