Skip to main content
RolandBaumgaertner72
RolandBaumgaertner72
New Member
March 6, 2025
Question

Blocking monster in URL Webfilter

  • March 6, 2025
  • 3 replies
  • 1532 views

Hello,

 

we have an issue with blocking hdfull.monster. We tried in Webfilter and URL filter and it would not work. Checking nslookup there are Cloudflare IPs and comparing with the test sessions I see other Cloudflare IPs.

 

Any suggestion how to block this video stream monster?

 

Thanks!

3 replies

AEK
SuperUser
AEK
SuperUser
March 6, 2025

Hi Roland

Can you share the web filter you are using?

AEK
dingjerry_FTNT
Staff
dingjerry_FTNT
Staff
March 6, 2025

Hi @RolandBaumgaertner72 ,

 

Not sure which one you are using, Certification Inspection or Deep Inspection.

 

And please share your configuration about URL Filter and web filter (I assume you mean Category based Filter).

dingjerry_FTNT
Staff
dingjerry_FTNT
Staff
March 6, 2025

Hi @RolandBaumgaertner72 ,

 

I just did a quick test with Certification Inspection and URL Filter, it worked for me:

 

URL_Filter.png

jpsgps
jpsgps
Visitor III
March 6, 2025

I am seeing a similar issue with Cloudflare sites. 
Certificate Inspection and URL Filter are being used but the firewall does not even see the URL at all, only the IPs.

AEK
SuperUser
AEK
SuperUser
March 6, 2025

Probably due to ECH. Check this.

https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/447220/block-or-allow-ech-tls-connections

AEK
    jpsgps
    jpsgps
    Visitor III
    March 6, 2025

    Yes, I just found some documentation about ECH from Cloudflare. I will check out this link, thanks!

    Terms & ConditionsAccessibility statement