Troubleshooting Tip: Not possible to access websites which use Cloudflare computer-human distinction verification when Web Filter security profile is enabled on the firewall policy
| Description | This article describes an issue relating to Cloudflare computer-human distinction verification, which can prevent access to some websites when a Web Filter security profile is enabled. |
| Scope | FortiOS. |
| Solution | Cloudflare computer-human distinction verification can prevent users from accessing some websites when a Web Filter security profile is enabled on the firewall policy responsible for traffic.
An example of this type of firewall policy is provided below:
When the issue occurs, the output below is received when trying to access a website which uses Cloudflare computer-human distinction verification:
The solution for this issue is to create an entry in 'Static URL Filter' of the Web Filter Security Profile, as shown below:
Note: Action needs to be set to "Exempt" in the static url configured. If it is set to allow the it will permit the firewall to continue scanning against FortiGuard Web Filter (FortiGuard categories). If the FortiGuard web filter allows the traffic for that URL, the scanning will continue to be done by the web content filter and so on. Refer more on Technical Tip: The difference between 'allow' and 'exempt' in the web filter URL filter regarding actions. |
