Technical Tip: How to block users from searching for a specific word on Google

1. Access the FortiGate and then go to Security Profiles -> Web Filter.
2. Select 'Create New':

3. Edit the Web Filter, scroll down the page briefly, and go to 'Static URL Filter'.
4. Enable the option 'URL Filter' and then select 'Create New':

In this example, all searches on Google related to the word 'game' are blocked. Type the URL following the example below, it is possible to block any word search:

CLI Reference:

5. Go to 'Policy & Objects -> Firewall Policy' and create or edit the firewall policy responsible for allowing communication from the LAN towards the Internet:

6. In the firewall policy, scroll down under 'Security Profiles', enable the 'Web Filter' and select the newly created profile, and set inspection to 'Proxy Mode'.

CLI Reference:

config firewall policy
    edit 20
        set name "Internet"
        set uuid 34845dd8-cd02-51ef-ec95-c1674de5d764
        set srcintf "port1"
        set dstintf "port3"
        set action accept
        set srcaddr "all"
        set dstaddr "all"
        set schedule "always"
        set service "ALL"
        set inspection-mode proxy
        set utm-status enable
        set ssl-ssh-profile "deep-inspection"
        set webfilter-profile "Test filter"
        set nat enable
    next
end

7. Make sure to enable the deep-inspection profile in the 'SSL Inspection' and import the certificate onto the user's device. This is essential in order for this feature to work. To do this, follow the steps seen in this article:  Technical Tip: How to enable deep inspection and i... - Fortinet Community  
   Make sure that the 'Search Engines and Portals' category is not added in 'Exempt from SSL inspection'.
   
                                     
   
   
8. In order to ensure the FortiGate is able to inspect all the traffic coming from the user, QUIC should be blocked.
   The best way to block this for all users would be to make a new policy by following the steps seen in this article (Method 3): Technical Tip: How to block/disable QUIC - Fortinet Community  . Alternatively, this can be done for an individual user by following these steps:

• In the URL bar, type:  chrome://flags
• In the search bar, type 'QUIC'.
• Select the first option and hit Disable.
  

• Select 'Relaunch' to apply the settings.
  
  

9. All searches from the machines using the Policy above will have the search for the blocked word denied: