Skip to main content
Wee-Lamm
Wee-Lamm
New Member
November 23, 2023
Question

Fortimail Cloud, URL Filters; v7.2.4(GA-Maturity), build401, 2023.05.17

  • November 23, 2023
  • 4 replies
  • 1611 views

We have several URL Filters in active state, with competing categories including for example;
Security Risk: newly-observed-domain
Security Risk: newly-registered-domain

If a Fortiguard Category is enabled in more than one filter, is the scan performed once for all filters that contain the category, or will each filter that includes the category cause a subsequent scan to be performed? 

That is, if 3 filters each indicated to scan a 'newly-observed-domain', will that trigger 1 or 3 scans of the 'newly-observed-domain'?

Steven.

4 replies

Anthony_E
Staff
Anthony_E
Staff
November 27, 2023

Hello Steven,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
Anthony_E
Staff
Anthony_E
Staff
November 30, 2023

Hello Steven,

 

We are still looking for someone to help you.

We will come back to you ASAP.


Regards,

Best Regards
Anthony_E
Staff
Anthony_E
Staff
December 6, 2023

Hi Steven,

 

A FortiCloud expert will soon reply to your request.

 

Regards,

Best Regards
Debbie_FTNT
Staff & Editor
Debbie_FTNT
Staff & Editor
December 8, 2023

Hey Wee-Lamm,

please take this with a large grain of salt, I'm still familiarizing myself with FortiMail, but based on my experience with FortiGate and webfiltering:
- webfilter/urlfilter results are cached for at least a few minutes
- if all three profiles apply to the same traffic, this will probably trigger three lookups, but the 2nd and 3rd would just take the cached result from the first lookup

    Terms & ConditionsAccessibility statement