Skip to main content
hamdi_kadri
hamdi_kadri
New Member
June 25, 2018
Question

Fortigate Web Filter fails to block Facebook on Google Chrome

  • June 25, 2018
  • 2 replies
  • 23981 views

This is a weird phenomena I noticed today : even though Social Networking Sub-category is set to "block" on Web Filter, users who use Google Chrome still have access to it.

I tried with Firefox and Opera and Web Filter works properly.

Changing my settings to use Explicit proxy, I can get to block facebook with no problems. But if I apply my Web Filter Profile to the ACL, facebook bypasses the Web Filter.

I even blocked everything on my Web Filter profile, added a wildcard filter, etc.. it didn't work with facebook.

My firmware is v5.4.8,build1183 running on a FG30E.

Any ideas ?

 

UPDATE : I tried with another firmware version (v5.2.10,build742) on another appliance (FG500D) and WebFilter is working properly. Can someone else confirm the issue with v5.4.8,build1183 ?  My real concern is that the appliance is in production and I can't upgrade without being sure that it will solve the issue.

2 replies

sw2090
SuperUser
sw2090
SuperUser
July 5, 2018

Yesterday I got notified by some user that they can access Facebook to even though category is blocked like in your case. So maybe we have the same problem on FGT9x and FGT100E wih 5.4.x .

 

Did you already open a case with Fortinet Support on this?

sw2090
SuperUser
sw2090
SuperUser
July 5, 2018

Ok since we seem to have that same issue (facebook blocked by webfilter by fortiguard AND local category but still accessible) I now opened a ticket with Fortinet Support. We'll see what they will say...

Tindrli
Tindrli
New Member
July 17, 2018

The way how it worked for me (I'm on FortiOS 5.6.3 version) was that i had to change Inspection mode to Proxy and then i separated two policies. One policy is for Web filtering and second one is for App filtering. I created new SSL and IPS profile as well. Don't know how it will affect this process but I did it anyways. 

After i created policies i had to log out and log back in to the client computer and after that everything worked as intended. It seems that Web filtering and App filtering don't like each other if they are under one policy.

sw2090
SuperUser
sw2090
SuperUser
July 17, 2018

ok but this one one hand does not say anything about 5.4. There's may things different between 5.4. and 5.6. 

Also haven't yet gotten any solutions on my ticket wih Fortinet TAC.

Terms & ConditionsAccessibility statement