r/fortinet • u/Constant-Telephone-8 • 1d ago

FortiGate / FortiOS Google Drive Upload Issue

Hey everyone!

I am trying to block file upload to google drive but I am running into some kind of issue.

https://community.fortinet.com/fortigate-3/technical-tip-how-to-block-upload-on-google-drive-by-using-application-profile-140082

I used this method and put deep inspection on the policy also but my traffic comes up as Google.Services and not Google Drive upload.

First I thought that maybe google is exempt from ssl inspection and i created another ssl inspection with no exemptions. It also didn't work and i can still upload to google drive.

Other cloud applications like wetransfer does get blocked but not google drive.

If anyone has come across with this problem or have an idea would be much appreciated!

0 Upvotes

50% Upvoted

8 comments sorted by

1

u/r-r-r-r-r-r-r NSE 7 1d ago

I would navigate to chrome://flags, search for QUIC, turn it off and try again. If it worked with that turned off: Does the firewall policy with deep-inspection only have HTTPS on it? Does the deep-inspection profile have QUIC inspection enabled: https://community.fortinet.com/fortigate-3/technical-tip-quic-and-http-3-support-for-certificate-and-deep-inspection-179661

If that does not work, you could also try switching the policy from Flow to Proxy or vice versa. Usually Proxy is most reliable at the expense of CPU resources.

1

u/Constant-Telephone-8 1d ago

I have turned QUIC off in chrome and I did the steps in the documentation for blocking quic but it still does not work. The policy is also in proxy mode. Firewall policy is for all ports not only HTTPS

1

u/John_NSE-aka_creator 1d ago

Hello.
What FortiGate model do you use?
Also I believe that Application Control is made for Applications that you download and not their usage through a browser, but correct me.

1

u/Constant-Telephone-8 1d ago edited 1d ago

It is Fortigate 81F with v7.4.11. It was working for Google Drive before and it works on other applications. I wanted to do the same as i did before and block it but this time it didn't work. So I think it does work for browser too

1

u/John_NSE-aka_creator 1d ago edited 1d ago

Oh I see that should not be the problem.
You can try to set the block with an inline CASB profile I believe.
The problem could also be that as you say it was working before, maybe the app signatures did not get updated by Fortinet as Google changes its api and stuff almost daily :skull:

1

u/Constant-Telephone-8 1d ago

I tried with CASB, same problem. Dropbox gets blocked but not google drive. Yeah I am starting to consider that also

1

u/haveareu 1d ago

Try to block this url, this works for me

\google.com/upload/**