Troubleshooting Tip: FortiGate webfilter starts blocking some URLs from microsoft services
| Description | This article describes a behavior where users were allowing Microsoft services but FortiGate unexpectedly starts blocking some specific services from Microsoft. |
| Scope | FortiGate using a Webfilter and URL filter list to restrict the traffic. |
| Solution | Users may configure a webfilter profile to allow Microsoft services and block some specific words.
In this example the service affected is powerapps.
In the logs, validate FortiGate is allowing the powerapps web service.
date=2026-01-18 time=06:14:41 id=75988540 itime="2026-01-18 time=06:14:41 euid=3 epid=10728 dsteuid=3 dstepid=101 logver=702121761 type="utm" subtype="webfilter" level="information" action="passthrough" sessionid=172581499 policyid=15 srcip=192.168.10.1 dstip=13.107.246.33 srcport=56595 dstport=443 proto=6 logid=0315012545 service="HTTPS" eventtime=1769246081055928585 urlfilteridx=10 sentbyte=5241 rcvdbyte=17110 srcintfrole="lan" dstintfrole="lan" direction="outgoing" reqtype="referral" url="https://apps.powerapps.com/apphost Origin=https://mysite.dynamics.com&appMetadat.Consent=true" urlfilterlist="List-webfilter" hostname="apps.powerapps.com" profile="webfilter-profile" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" eventtype="urlfilter" srcintf="lan.2" dstintf="wan" referralurl="https://mysite.dynamics.com/" msg="URL was exempted because it is in the URL filter list" tz="-0300" srcuuid="3e558fd8-c9cd-51ed-f28b-67d5e26ab8ce" dstuuid="60f78500-c0af-51ec-ef74-27e00e4ec845" policytype="policy" srccountry="Reserved" dstcountry="United States" httpmethod="GET" devid="FG222222222"
At the same time, FortiGate blocks the powerapps service. In the logs validate source and destination IP are the same.
date=2026-01-24 time=06:14:35 id=7598854035004721656 itime="2026-01-24 06:14:36" euid=3 epid=10728 dsteuid=3 dstepid=101 logver=702121761 type="utm" subtype="webfilter" level="warning" action="blocked" policyid=15 srcip=192.168.10.1 dstip=13.107.246.33 srcport=56577 dstport=443 proto=6 logid=0315012544 service="HTTPS" urlfilteridx=15 sentbyte=8820 rcvdbyte=2656423 craction=8 crscore=30 crlevel="high" srcintfrole="lan" dstintfrole="lan" direction="outgoing" reqtype="referral" url="https://content.powerapps.com/resource/uci-infra-web/scripts/M365CopilotAction.70e84=.js" urlfilterlist="List-webfilter" hostname="content.powerapps.com" profile="webfilter-profile" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" eventtype="urlfilter" srcintf="lan" dstintf="wan" referralurl="https://mysite.dynamics.com/" urlsource="Local URLfilter Block" msg="URL was blocked because it is in the URL filter list" tz="-0300" srcuuid="3e558fd8-c9cd-51ed-f28b-67d5e26ab8ce" dstuuid="60f78500-c0af-51ec-ef74-27e00e4ec845" policytype="policy" srccountry="Reserved" dstcountry="United States" poluuid="d4eb5290-5d8c-51ee-a2ef-f7e3af709691" httpmethod="GET" devid="FG222222222"
Validate the URL filter list of the webfilter profile.
show webfilter urlfilter 15 config webfilter urlfilter |