Skip to main content
sebastan_bach
sebastan_bach
New Member
March 9, 2018
Question

Fortiguard unrated in category description for Web-filtering

  • March 9, 2018
  • 1 reply
  • 14465 views

Hi, 

 

After facing web-filtering issues in NGFW mode in 5.6. I have reverted to profile based mode. 

 

Web-filtering is working as expected but url-category information is missing in the web-filtering logs and even under websites in Fortiview. 

 

To ensure we are not blocking legitimate urls. I am using the default web-filter profile in allow mode to see the categories of urls being accessed by users and then set enforcement policy. However the challenge is the logs are not showing the url-category. 

 

I have attached the screenshots from my system. Hope somebody knows how to solve this or have seen similar issue before. I have tested the connectivity with fortiguard services as per cookbook articles but still no luck with the issue. 

 

Sebastan 

 

    1 reply

    EMES
    EMES
    New Member
    March 9, 2018

    I followed your other post and tried to replicate your issue, I was seeing the logs but the categories were unknown and they were reporting a lookup error

     

     

    Profile NameTSET WebRequest TypedirectDirectionoutgoingErrorunknownMessageA rating error occurs

     

    I even took it further and created a deny policy to block some categories and it didn't work. It seems as if changing to that mode breaks the fgt talking to FortiGuard for url lookups. I havn't tried doing a config export and an import/reboot. Maybe that will jump start it.

    sebastan_bach
    sebastan_bachAuthor
    New Member
    March 10, 2018

    Thanks for taking time to replicate the issue. But were you able to enforce url-filtering without application control. I mean in the logs were you able to see the event as webfilter as compared to application control as in my case. 

     

    Where were you able to see the error. Can you please let me know the debug you used to see the error. Would be great to know. 

     

    Sebastan

    Terms & ConditionsAccessibility statement