How to block internet access for specific machines

[@Knitri-b1y]

Great video - Thanks a lot !

[@PedroMatosMAC]

Thanks for the great video - really nice! Just a pity that the sound is so very Low...

[@alanclarke7]

Mike, two weeks ago I purchased a FG-60E, upgraded it with v5.6.2 build1486 (GA) firmware, then configured it using some of the techniques I learned from watching your videos. I have a question pertaining to all of your videos. Your Fortigate user interface seems to be MUCH speedier than mine. When you edit your videos, do you speed them up then dub your narration back in over the sped-up video? Before my FG-60E, I was using a Mikrotik RB2011 router that has near-zero wait time for any change made to the configuration (using Mikrotik's winbox.exe utility). Thanks for all of your informative videos. They are quite helpful.

[@jhimbelortiz9237]

Thank you for creating videos ! :D this is so much help to us.

[@ricocriner5771]

You showed me how yours works, but I'm still guessing about how to create my own policy to do the same thing. How do I create one from scratch?

[@ebosac8813]

Limiting the number of devices a username and password can be used on a Fortinet captive portal setup. My question

[@jasonklems8584]

keep up the good videos, but please see if you can boost your audio? I have to crank my macbook pro to full volume and I can still barely hear you.

[@atexnik]

Hi. What is under your QUIC service group? Is there any other ports except udp/443 and udp/80 for QUIC?

[@CarlDorio]

Can we block one specific user to have access to Wi-Fi network and "cable" network and at same time, on same machine, one admin account will have access to both of them? Example. Local user go on McDonald and can't access Wi-Fi. Later, same computer, but it's one admin user. He can have access to McDonald Wi-Fi. Thanks

[@dailyview3574]

how about All address from source ? it will bock all too ?

[@rahulvishaalpillay6074]

Hi how can you open an website in fortinet 50E ..please help me bro

[@psyhodelik]

Thanks !!

[@Houl777]

Good day. As i see you use poxy based inspection mode. According to Fortinet reference manual IPS isn't compatible with this mode. Did you test IPS sensor in this mode? Is it work well?

[@FortinetGuru]

IPS works in Proxy Mode as well.

[@Polarisfff]

Computers in the company should be able to download update files for the antivirus even if no user is logged in. But they can not. This means that domain computers must have access to certain URLs and may also download here. What needs to be set up here?

[@tejaskansara2276]

Sir Can we block perticuler PC's usb port by fortigate

[@FortinetGuru]

If I’m understanding the question. No.

[@MrcooliceNet]

u can do this with gpo

[@babakhan-kq7tc]

Mike, I have fortinet 300d imy office. My boss is asking to block every website instead of WhatsApp and certain sites. I done this though web filtering. I made a web filter with a name white filter. In this I used i.g. *google.com allow *cnn.com allow *bbc.com. allow *whatsapp.com allow *.* Block I enable the web filter then some times it works fine but sometimes it blocks the same pages in web filter. Also whatsapp messages work fine but videos do not share. Please guide me in this regard. Thaks

[@babakhan-kq7tc]

*.* block in the last

[@HaiTran-fi1uc]

how can i add an ip to an existing ipv4 policy group?

[@FortinetGuru]

create the new ip address object, add it to the address group that is being used by the desired policy

[@josemby619]

What if I only want to block Facebook,KZbin, but he can access yahoo, google, gmail, on the specific machines only?

[@FortinetGuru]

You can use NGFW mode to do this OR you can build policies for those machines that have more stringent UTM capabilities. As long as those policies are higher than the ones that allow the connection you are proper.

[@adamn7516]

How would I go about blocking a specific machine from a single website. For example I want to block only GURU PC from Facebook but still allow it to access everything else on the web?

[@FortinetGuru]

I have a video that mentions how to do it via MAC Address (DEVICE ID). Check the channel for that. You can also (if the fortigate does DHCP) set a reservation so that device always gets the same IP and then place a policy at the top for that specific IP going out that blocks the sites access (web filter or have the sites FQDN set for the destination)

[@krynicah]

You're not blocking internet, you're blocking everything

[@FortinetGuru]

That is correct. The policy is blocking all services etc.

[@LovedAsYouAre1134]

Anyway to give a client an easy way to turn on and off their kids devices without giving them access to the setup of the router? Maybe a script or something?

[@cecilproctor4984]

Devices are not an option in 6.2. They removed the feature. You will have to do it by IP addresses.

[@wicuslabuschagne4928]

Do you know why? I'm also trying to create a policy using devices but simply can't.

[@sbasalan]

How about a MAC ADDRESS instead an IP

[@lemzsan645]

how to block social media in specific machine ?

[@JANSfamilyvideos]

Hello can you please contact me in private? Do you have an email or phone to reach. We have a fortigate 100e and trying to connect to a bunch of devices (about 1000). Yes a lot. I set the IP range from 10.1.0.25 to 10.1.7.25 for example in DHCP setting but devices after 10.1.4.xx start duplicating IP. As if it's reaching its max limit. First now we had switches with 64 ports in series using same port from portigate. I told friend to connect switches directly to the fortigate using all 16 ports Instead of just two. Still not sure why new IP address not released by fortigate? Really looking for help PLEASE

[@FortinetGuru]

[e-mail]

[@nidhiii1434]

voice is low

[@nortonyatzee7254]

snot boy

[@FortinetGuru]

booger head :-P

[@esit2082]

mmmm sniffing in my ear. What's the opposite to ASMR?

[@FortinetGuru]

You trying to flirt with me?

[@esit2082]

@@FortinetGuru Ha ha, mmm maybe?