Skip to main content
graemeb
New Member
January 13, 2025
Solved

DNS v Web Filter v ISDB

  • January 13, 2025
  • 4 replies
  • 2062 views

My aim is mainly blocking bad sites (malware, C2, phishing) not controlling certain types.

 

Web filter and DNS make sense, though perhaps are a tad similar.

 

ISDB seems to offer some IP blockers. Would ISDB cover my wish by blocking connections pre/post malware to malicous domains (IP behind)?

 

Thank you

Best answer by pminarik

The smallest relevant package is "Web Security", and that includes both webfilter and DNS filter.

 

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/og-fortiguard.pdf

4 replies

AEK
SuperUser
SuperUser
January 13, 2025

Web filter is for Web navigation, you can control which Web categories you can access or you want to deny.

ISDB IP reputation is not for Web navigation, it is for Tor, Proxy, C&C, bad bots and so.

So they don't have the same goal.

Besides, I think DNS is the old fashion. I think it is not as efficient as Web filter.

AEK
graemeb
graemebAuthor
New Member
January 13, 2025

Do you think ISDB would safely do my ask of blocking drive by downloads, phishing, c2...please?

AEK
SuperUser
SuperUser
January 13, 2025

According to Fortinet it should.

I used it and it seems working.

I hope one of the Fortinet team can confirm if the IP reputation DB is updated efficiently.

AEK
graemeb
graemebAuthor
New Member
January 13, 2025

I got a bunch of 30 day trials but oddly does not inc. firmware updates nor IPDB.

Buying Forticare alone is not much money.

Thank you

dingjerry_FTNT
Staff
Staff
January 13, 2025

Hi @graemeb ,

 

If you have UTM licenses, I would recommend you use Web Filter + Application Control.

graemeb
graemebAuthor
New Member
January 13, 2025

No, I am a glorified home user so think it's a bit ott for me. Just after malicous ip/site blocking.

Thank you

graemeb
graemebAuthor
New Member
January 13, 2025

@dingjerry_FTNTis it possible to buy just dns or web filter alone not under a pack?

dingjerry_FTNT
Staff
Staff
January 13, 2025

Hi @graemeb ,

 

Sorry, this is a sales question, I have no idea.

graemeb
graemebAuthor
New Member
January 14, 2025

I will ask a reseller thanks