FortiGuard Web Filtering Category and Classification numbers / FortiGate configuration and troubleshooting
Description
Solution
In FortiOS 4.0, the FortiGuard Web Filtering Category and Classification numbers can be retrieved by editing from a FortiGate CLI a protection profile, and typing "get", as shown in the following examples.
Since FortiOS 4.0MR2
FGT# config webfilter profile
FGT(profile) # edit test
FGT(test) # get
FortiOS before 4.0MR2 :
FGT1 # config firewall profile
FGT1 (profile) # edit test
FGT1 (test) # get
This simple example shows how to block all URL rated as Potentially Liable in FortiOS 4.0MR2 :
Verifying a URL rating can be done from the FortiGuard Web Filtering page : http://www.fortiguardcenter.com/webfiltering/webfiltering.html
Troubleshooting rating issues can be done using the following diagnose command (you may want to log all output to a file as it may be verbose depending on the traffic volume):
diagnose debug application urlfilter -1
diagnose debug en
And then access the web resource in question.
The FortiGuard URL web filtering service provides filtering capabilities based on web content categories and web content classifications. More information is available in the Web Filtering section of the FortiGuard Center web site.
FortiOS v5.4
For FortiOS v5.4 a full listing of the FortiGuard Web Filtering categories can be found in the Security Profiles chapter of the FortiOS Handbook.
FortiOS v5.0 and v5.2
This article is no longer applicable, a listing of the categories and classifications can be found on the FortiGuard Center web site.
Prior to FortiOS v5.0
This article describes the URL rating category and classification numbers available in the FortiGate, and how to configure and verify, or troubleshoot rating issues.
FortiOS v5.4
For FortiOS v5.4 a full listing of the FortiGuard Web Filtering categories can be found in the Security Profiles chapter of the FortiOS Handbook.
FortiOS v5.0 and v5.2
This article is no longer applicable, a listing of the categories and classifications can be found on the FortiGuard Center web site.
Prior to FortiOS v5.0
This article describes the URL rating category and classification numbers available in the FortiGate, and how to configure and verify, or troubleshoot rating issues.
Solution
In FortiOS 4.0, the FortiGuard Web Filtering Category and Classification numbers can be retrieved by editing from a FortiGate CLI a protection profile, and typing "get", as shown in the following examples.
- gXY are representing the rating categories
- cXY are representing the rating classifications
Since FortiOS 4.0MR2
FGT# config webfilter profile
FGT(profile) # edit test
FGT(test) # get
| [...] g01 Potentially Liable: 1 Drug Abuse 2 Occult 3 Hacking 4 Illegal or Unethical 5 Racism and Hate 6 Violence 57 Marijuana 58 Folklore 59 Proxy Avoidance 60 Web Translation 61 Phishing 62 Plagiarism 83 Child Abuse g02 Controversial: 7 Abortion 8 Adult Materials 9 Advocacy Organizations 11 Gambling 12 Extremist Groups 13 Nudity and Risque 14 Pornography 15 Tasteless 16 Weapons 63 Sex Education 64 Alcohol 65 Tobacco 66 Lingerie and Swimsuit 67 Sports Hunting and War Games g03 Potentially Non-productive: 17 Advertising 18 Brokerage and Trading 19 Freeware and Software Downloads 20 Games 23 Web-based Email 68 Web Chat 69 Instant Messaging 70 Newsgroups and Message Boards 71 Digital Postcards g04 Potentially Bandwidth Consuming: 24 File Sharing and Storage 25 Streaming Media 72 Peer-to-peer File Sharing 75 Internet Radio and TV 76 Internet Telephony g05 Potential Security Violating: 26 Spyware and Malware g06 General Interest: 28 Arts and Entertainment 29 Culture 30 Education 31 Finance and Banking 32 Homosexuality 33 Health and Wellness 34 Job Search 35 Medicine 36 News and Media 37 Social Networking 38 Political Organizations 39 Reference 40 Religion 41 Search Engines and Portals 42 Shopping and Auction 43 General Organizations 44 Society and Lifestyles 46 Sports 47 Travel 48 Personal Vehicles 77 Child Education 78 Real Estate 79 Restaurant and Dining 80 Personal Websites and Blogs g07 Business Oriented: 49 Business 50 Information and Computer Security 51 Government and Legal Organizations 52 Information Technology 53 Armed Forces 84 Web-based Applications g08 Others: 54 Dynamic Content 55 Miscellaneous 56 Web Hosting 81 Secure Websites 82 Content Servers 85 Domain Parking g21 Unrated c01 Cached Content c02 Multimedia Search c03 Image Search c04 Audio Search c05 Video Search c06 Spam URL c07 Personal Privacy [...] |
FortiOS before 4.0MR2 :
FGT1 # config firewall profile
FGT1 (profile) # edit test
FGT1 (test) # get
| [....] g01 Potentially Liable: 1 Drug Abuse 2 Occult 3 Hacking 4 Illegal or Unethical 5 Racism and Hate 6 Violence 57 Marijuana 58 Folklore 59 Proxy Avoidance 60 Web Translation 61 Phishing 62 Plagiarism 83 Child Abuse g02 Controversial: 7 Abortion 8 Adult Materials 9 Advocacy Organizations 11 Gambling 12 Extremist Groups 13 Nudity and Risque 14 Pornography 15 Tasteless 16 Weapons 63 Sex Education 64 Alcohol 65 Tobacco 66 Lingerie and Swimsuit 67 Sports Hunting and War Games g03 Potentially Nonproductive: 17 Advertising 18 Brokerage and Trading 19 Freeware Downloads 20 Games 23 Web based Email 68 Web Chat 69 Instant Messaging 70 Newsgroups and Message Boards 71 Digital Postcards g04 Potentially Bandwidth Consuming: 72 Peer-to-peer File Sharing 73 Personal Storage 74 Multimedia Download 75 Internet Radio and TV 76 Internet Telephony g05 Potential Security Violating: 26 Malware 27 Spyware g06 General Interest: 28 Arts and Entertainment 29 Culture 30 Education 31 Finance and Banking 32 Homosexuality 33 Health and Wellness 34 Job Search 35 Medicine 36 News and Media 37 Personal Relationships 38 Political Organizations 39 Reference 40 Religion 41 Search Engines 42 Shopping and Auction 43 General Organizations 44 Society and Lifestyles 46 Sports 47 Travel 48 Personal Vehicles 77 Child Education 78 Real Estate 79 Restaurant and Dining 80 Personal Websites g07 Business Oriented: 49 Business 50 Information and Computer Security 51 Government and Legal Organizations 52 Information Technology 53 Armed Forces g08 Others: 54 Dynamic Content 55 Miscellaneous 56 Web Hosting 81 Secure Websites 82 Content Servers g21 Unrated c01 Cached Content c02 Multimedia Search c03 Image Search c04 Audio Search c05 Video Search c06 Spam URL [....] |
This simple example shows how to block all URL rated as Potentially Liable in FortiOS 4.0MR2 :
| config webfilter profile edit "block_all_Potentially_Liable" config http set options fortiguard-wf end config https set options fortiguard-wf end config ftgd-wf set allow g02 g03 g04 g05 g06 g07 g08 g21 g22 c01 c02 c03 c04 c0 5 c06 c07 set deny g01 end set web-ftgd-err-log enable next end |
Verifying a URL rating can be done from the FortiGuard Web Filtering page : http://www.fortiguardcenter.com/webfiltering/webfiltering.html
Troubleshooting rating issues can be done using the following diagnose command (you may want to log all output to a file as it may be verbose depending on the traffic volume):
diagnose debug application urlfilter -1
diagnose debug en
And then access the web resource in question.
Be sure to disable debugging once done:
diag deb dis
diag deb app urlfilter 0
diag deb dis
diag deb app urlfilter 0
Related Articles
Troubleshooting Tip: WEB filtering rating problems when using FortiGuard rating by IP and URL
Technical Tip: Web site appears to be placed in wrong category by FortiGuard web filtering