Skip to main content
rahulkaushik-22
Staff
Staff
July 18, 2022

Technical Tip: Subdomains inherit the same category as the parent domain in WebRating Override if not defined explicitly

  • July 18, 2022
  • 0 replies
  • 1824 views
Description

This article describes how subdomains inherit the same category as the parent domain in Web Rating Override if not defined explicitly.

Scope All FortiOS.
Solution

This is expected behavior.

 

When a domain is defined in the Web Rating Override, then all of its subdomains inherit the same category unless the category explicitly defined in the web rating override entry.

 

Example:

 

Create a web rating override for the domain 'google.com':

 

rahulkaushik22_0-1658159152853.png

Example logs for 'google.com' and its subdomains such as; 'drive.google.com', 'mail.google.com', 'accounts.google.com', and 'play.google.com':

 

rahulkaushik22_1-1658159181067.png

 

rahulkaushik22_2-1658159188449.png

 

rahulkaushik22_3-1658159200106.png

 

A subdomain of the domain can be allowed either by URL filter list in the Web Filter profile, or by explicitly defining the category of the subdomain.

 

The subdomain can be explicitly defined in the web rating override:

 

rahulkaushik22_4-1658159236401.png

 

Log:

 

rahulkaushik22_5-1658159264403.pngrahulkaushik22_6-1658159284371.png

 

Log:

 

rahulkaushik22_7-1658159306348.png

 

In the above log example, the category column is empty because it is allowed by the URL filter of the web filter profile.