Troubleshooting Tip: WebFiltering not working: 'The service is not enabled'
Description
Solution
- service.fortiguard.net.
- update.fortiguard.net.
However, executing the following command returns an error message:
Locale : english
The service is not enabled.
FGT#
.
.
set webfilter-force-off : enable
If 'webfilter-force-off' is enabled, set it to disable:
The web filter service remains disabled, despite how the web filtering profile with SSL/SSH inspection is applied to at least one firewall policy.
Ensure that 'FortiGuard Category Based Filter' is enabled under the web filter profile.
Once the 'FortiGuard Category Based Filter' is enabled, servers will be visible under 'diagnose debug rating'.
Note:
Web Filtering in System -> FortiGuard -> Filtering Services Availability will still show as UP even if webfilter-force-off is set to enable, which is why it is important for this setting to be checked via CLI.
Related article:
Troubleshooting Tip: Resolving FDS Communication Issues (FortiGuard Distribution Servers)