Skip to main content
Contributor III
July 7, 2008
Question

Allowing only certain URL' s

  • July 7, 2008
  • 20 replies
  • 7330 views
I need to block all web access for certain users EXCEPT for certain job related URL' s (i.e. weather.com) The users are allowed full access during certain times of the day (breaks, lunch, etc.) I was successful in configuring multiple policies to achieve this, but am looking to allow specific URL' s while blocking everything else. Can this be done with FortiOS and how? Thanks for any assistance.

    20 replies

    UkWizard
    New Member
    July 11, 2008
    try putting in just your ip and your domain without the /webmail part. as simple entries and see what happens.
    Hracio
    New Member
    July 11, 2008
    Hi there.. with the last two url filters using simple format or regex, i always get the The URL you requested has been blocked. URL = xxx.mydomain.xxx It Always blocks the root domain, no matter what " allows" i have before... Could be a certificate problem ?¡.. FortiGate Administration Guide, Page 462.
    HTTPs URL formats Type a top level domain name for HTTPs URL filtering, for example, www.example.com. HTTPs URL filtering works by extracting the CN from the server certificate during the SSL negotiation. Because the CN only contains the domain name of the site being accessed, HTTPS web filtering can only filter by domain names.
    That doesnt make any sense..(practical sense) so i can block the whole domain or nothing at all ? Regards
    UkWizard
    New Member
    July 11, 2008
    yes it could be. https is a bit hit and miss i believe, but havent seen any customers who have had big issues with it.
    Hracio
    New Member
    July 11, 2008
    yup, Iam one of those customers.. Posted a supp ticket on 6/25/2008... still running...
    Hracio
    New Member
    July 15, 2008
    .. as i expected.. but too much time for that answer... " Sorry for the late reply, after a further investigation. The method that i suggest is only apply to HTTP, according to our developer URL filter for HTTPS only apply to main domain. In your case, any sub-domain will be treat as block, It is by design." regards,.
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.