Information
Ensure FortiGate Application Control blocks high risk application to reduce attack surface.
Rationale:
High risk applications such as those in 'P2P' and 'Proxy' are known for spreading malwares. Other than that, some of these traffic is encrypted and therefore is able to bypass network security inspection (for those without decryption implemented). Blocking these applications from running eliminates this risk.
If any application that falls under 'P2P' and 'Proxy' requires to be allowed based on organization's policy, that specific application needs to be under 'Monitor' mode in the 'Application and Filter Override' configuration.
Solution
Review Application Control Security Profiles and validate that 'P2P' and 'Proxy' category is blocked.
Default Value:
Disabled on default profile