Skip to main content
theFWdude
theFWdude
New Member
September 28, 2018
Solved

FortiGates miss-categorizing FortiGuard URLS

  • September 28, 2018
  • 1 reply
  • 7535 views

So, I have at least 3 FortiGates (5.6.x) in my environment where they are miss-categorizing URLs as "Phishing" even though FortiGuard says they "Government and Legal Organizations".  Manual overrides can be created and do work; sites are also categorized as "Government and Legal Org" in the Original Category column; it's like my FortiGates are not accepting FortiGuard's categories for some reason or another.

 

 

[Support Ticket Number: 2931401]

    Best answer by emnoc

    Make sure your FGT is updated and  can connect to the fortiguard

     

     cityofclarksville.com is listed as 

    Category: Government and Legal Organizations

     

    1 reply

    Dave_Hall
    Dave_Hall
    New Member
    September 28, 2018

    Hi Camron.  Just to be on the safe side, have you confirmed/clarified the FQDN for cityofclarksville.com resolves to the correct IP(s)?  Using KLOTHNS Lookup, I am showing 208.88.169.210 for IP.  Punching this IP into the Web Filter Lookup shows it was at one time listed as a Phishing site, but as of today is now listed as Government and Legal Organizations.

     

     

    tanr
    tanr
    New Member
    September 28, 2018

    What was the timeframe you saw the issue?  I saw a few webfilter blocks occur about 12 hours back that were on URLs that now show their categories as Business > IT.  Maybe Fortinet had some issues updating their backend databases.

    emnoc
    emnocAnswer
    New Member
    September 28, 2018

    Make sure your FGT is updated and  can connect to the fortiguard

     

     cityofclarksville.com is listed as 

    Category: Government and Legal Organizations

     

    Terms & ConditionsAccessibility statement