Skip to main content
AlexFeren
AlexFeren
New Member
March 14, 2017
Question

Clarification of 'ftgd-disable' within 'config ftgd-wf' within 'config webfilter profile'

  • March 14, 2017
  • 1 reply
  • 12651 views

1. Cookbook clearly states, regarding GUI, "FortiGuard Web Filter is enabled and configured within web filter profiles by enabling FortiGuard Categories." Is this equivalent of 'options' attribute set to 'fgd-disable"?

2. Is any setting within "config ftgd-wf" effective if 'options' value is 'fgd-disable"?

    1 reply

    hmtay_FTNT
    Staff
    hmtay_FTNT
    Staff
    March 23, 2017

    Hi AlexFeren,

     

    No, it is equivalent to "unset options" or "set options <could be anything that is not ftgd-disable>". If "ftgd-disable" is enabled, the Web Filter will not be scanning packets under the FortiGuard Categories. The regular Static URL Filter would still work.

     

    HoMing

     

    AlexFeren
    AlexFerenAuthor
    New Member
    March 23, 2017

    Hi Ho Ming,

    thanks for taking time to answer.

     

    However, you haven't really answered my second question:

    >> 2. Is any setting within "config ftgd-wf" effective if 'options' value is 'fgd-disable"?

     

    Your reply:

    > If "ftgd-disable" is enabled, the Web Filter will not be scanning packets under the FortiGuard Categories. The regular Static URL Filter would still work.

     

    The 'Static URL Filter' is covered by "config web" not "config ftgd-wf", so, it doesn't answer my question. My question: if "config ftgd-wf"'s 'options' is set to "ftgd-disable" will any other setting within "config ftgd-wf" have any effect?

     

    You can guess why I am confused - on/off operation of a feature (in this case, Web Filtering based on FortiGuard categories) is usually dictated by first order attribute, like "status", not a secondary attribute under "options".

    R's, Alex

    Terms & ConditionsAccessibility statement