Bypass web filter for one user

Forum|Forum|7 years ago
September 7, 2018
5 replies
10958 views

Hello,

We are a school district that just switched from Cisco ASA devices to FortiGate 201E firewalls for our schools. Our firewall is in flow-based inspection mode and is on version 5.6.3. We block Facebook, but want to allow just the principal to access it to update the school's Facebook page. Is there a way to whitelist his IP/MAC address or have a way for him to log in to get to Facebook?

Thank you.

5.6

Toshi_Esumi

SuperUser

Create a new policy and put the principal's device's IP in source address, then allow whatever you want to allow as services then place it above the existing policies. Don't forget to enable nat.

hsdAuthor

New Member

Thank you. I'll have a look at that.

darwin_FTNT

Staff

Seems the feature webfilter web override supports that function. It is working for proxy-based utm. For flow-based utm, the feature has been finished porting but haven't been committed to trunk. It should be available in FOS v6.x release (approximately, depends on developer porting the feature).

Sign up

Login with SSO

Login to the community

Login with SSO