How to block Hamachi 1.0.2.2 using FQDN firewall addresses

‎09-14-2007

Article

Description

How to block Hamachi 1.0.2.2 using FortiGate FQDN firewall addresses.

Components

All FortiGate units
FortiOS v3.0

Steps or Commands

Hamachi 1.0.2.2 is a VPN application that can be used to bypass firewalls. The following steps describe how to create two FortiGate FQDN firewall addresses, add those address to an address group and add a deny firewall policy including this address group to block Hamachi 1.0.2.2.

To add the Hamachi FQDN addresses

Go to Firewall > Address.
Select Create New.
Enter an address name, for example alpha.hamachi.cc.
Set Type to FQDN.
In the FQDN field enter alpha.hamachi.cc.
You can leave Interface set to Any.
Select OK to add the address.
Repeat to add the FQDN address bravo.hamachi.cc.

To add an address group

Go to Firewall > Address > Group.
Select Creat New.
Enter an address group name, for example hamachi.
Move the Hamachi FQDN addresses to the Members list.
Select OK to add the address group.

To add the address group to a deny firewall policy

Go to Firewall > Policy.
Select Create New.
Set the Source interface and address to the same settings as the policy you have that allows users to access the Internet.
Set the destination address to the hamachi address group.
You can leave Service set to ANY and schedule set to always.
Set Action to DENY.
Select OK.
Move the deny policy above all other outbound policies that allow Internet access.
Note: Always arrange deny policies above similar accept policies in a firewall policy list or else the deny policy will not be selected. See the FortiGate online help for more information about how policy matching works.