Skip to main content
dbhavsar
Staff
Staff
October 14, 2024

Technical Tip: Blocking access to websites URL directories and allowing the root website using static URL filter

  • October 14, 2024
  • 0 replies
  • 1138 views
Description This article describes how to access the root domain site while blocking its sub domains.
Scope FortiGate.
Solution

For example, the configuration below shows how to allow www.oracle.com while blocking www.oracle.com/java/technologies/downloads/

 

The website 'www.oracle.com' belongs to the General Interest, Information Technology category, which is allowed in the following screenshot.


The web-filter is configured as follows:


web-filter.pngThe firewall policy is configured as follows:


policy.png
As shown in the screenshot, www.oracle.com is accessible and www.oracle.com/java/technologies/downloads/ throws a blocked page.


website.png

 

For more information on how breakdown component in URL is done refer to this article and actions can be configured accordingly. 

 
Note:

Deep Packet Inspection must be used in the policy or else the web-filter will not be able to block the exact destination URL.