Skip to main content
Contributor
March 23, 2010
Question

Block Invalid URLs for HTTPS

  • March 23, 2010
  • 2 replies
  • 2965 views
Hi All, I had an application that wasn' t working for me as we had the Block Invalid URLs checked for HTTPS. I unchecked it and it worked afterwards. My question is whether anyone knows of a way to keep the box checked, but exclude specific URL' s from the check? I had the root domain added under the URL filter and exempted it, but it still didn' t work. We are running v 4.0 MR1 patch3 Thanks in advance!!!

    2 replies

    abelio
    SuperUser
    SuperUser
    March 28, 2010
    Hi, is possible the your unit does not support SSL content scanning and inspection; so, one approach could be define a local category, put that url in that local category, edit your protection profile and check that local category; it will be priorized over fortiguard checking. Another approach could be by just defining that domain as FQDN, define a new firewall policy with that destination, apply a profile with no-invalid URL check and putting that policy above other with similar destination address. hope it helps.
    Contributor
    March 29, 2010
    From my experience, invalid URLs seems to be forced regardless of exclusions when selected (not sure if by rule or bug). The only way to allow this would be to create a different profile for the specific invalid URL destinations like abelio stated.