Skip to main content
menatwork
Visitor III
June 23, 2022
Question

Forticlient 7.0.1 build 0103 managed by EMS -- Webfilterquestion

  • June 23, 2022
  • 3 replies
  • 1467 views

Hi folks,

we are very new to using Forticlient for our off-net devices. I configured all properly I think. Built a on-net profile and a offnet-profile, which is triggered correctly.

 

I checked whether the forticlient is blocking sites which have to be blocked like it was set up in the profile. In first instance, it did well.

 

Today I figured out, that SSL sites are not blocked by the forticlient.

 

Is the forticlient-webfilter (for https) only working if I enable the forticlient-browser-add-on?

If so, this means every user can disable the forticlient-browser-add-on and the webfilter stops working for https?

 

This would be cruel!

Hope I am wrong?

Thanks!

3 replies

Anthony_E
Staff
Staff
June 26, 2022

Hello menatwork,

 

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

 

Regards,

Best Regards
Anthony_E
Staff
Staff
June 27, 2022

Hello menatwork,

 

While I am looking for a solution, could you please check if you find the answer in this documentation?

 

https://docs.fortinet.com/document/forticlient/7.0.1/ems-administration-guide/24450/introduction

 

Do not hesitate to come back to me and indicate me if it helped or not.

 

Regards,

Best Regards
menatwork
menatworkAuthor
Visitor III
June 27, 2022

Hello,

thanks for your reply. Meanwhile I tested a lot of things and (I think) I found a solution. The Forticlient Webfilter only works as expected, when I enable the browser add-ons (Forticlient). If you dont enable the add-ons, it seems like that no HTTPS website is correctly rated / blocked (if you set up to block it).

 

I interpreted the manual in that way, that the browser-add-on is a "nice to have" and improves the detection of the forticlient, but in fact, the forticlient webfilter only works as expected, if you activate the add-ons.

 

If I am not right, it would be kind, to point me in the right direction ;)