FortiOS 6.0 Security: Blocking Facebook while allowing Workplace by Facebook

1. Creating a web filter profile

To make sure the features you need are available in the GUI, go to System > Feature Visibility. Under Security Features, enable Web Filter. Under Additional Features, enable Multiple Security Profiles.

To create a web filter profile, go to Security Profiles > Web Filter and select .

Enter a Name for the profile. Under Static URL Filter, enable URL Filter. Create a new URL filter to block Facebook. Set URL to facebook.com, Type to Wildcard, and Action to Block.

Create a URL filter to allow Workplace by Facebook. Set URL to your Workplace by Facebook site (in the example, fortinet.facebook.com), Type to Simple, and Action to Allow.

URL filters are applied in the order that they are listed. Make sure the filter allowing Workplace by Facebook is located above the filter blocking Facebook.

2. Applying the security profiles to Internet traffic

To apply the security profiles to traffic, go to Policy > IPv4 Policy and edit the policy allowing Internet access. Under Security Profiles, enable Web Filter and set it to use the new profiles. Set SSL Inspection to certificate-inspection.

3. Results

Attempt to access www.facebook.com. Access is blocked. Access is also blocked for the Facebook app.

Browse to your Workplace by Facebook site. Access is allowed.

To view information about the blocked traffic, go to FortiView > Threats. The page shows the blocked attempts to access Facebook.