Skip to main content
RyanFItz
New Member
October 7, 2020
Question

Fortinet blocking allowed site

  • October 7, 2020
  • 5 replies
  • 21699 views

All I have enabled is web filter -> url filter. I have one website to allow then block * as wildcard and for some reason it blocks the allowed sites and seems to be only https sites, my http sites in the allow list works but my https sites do not.

 

Does anyone have any idea?

 

google and fastpeoplesearch get blocked

 

Attached is a screen shot of the filter

 

Web Filter   Threat Level    high Direction    outgoing Log event original timestamp    1602069758 Event Type    urlfilter Hostname   &nbsp www.fastpeoplesearch.com Message    URL was blocked because it is in the URL filter list Profile Name    default Request Type    direct URL     www.fastpeoplesearch.com/ URL Filter Index    1 URL Filter List    default

 

 

Date    10/07/2020 Time    07:22:43 Duration    5s Session ID    52787 Virtual Domain    root NAT Translation    Source Source IP    192.168.168.5 NAT IP    75.150.165.185 Source Port    57133 Country    Reserved Primary MAC    9c:8e:99:5c:34:0b Source Interface    lan Host Name    SCCserver.sterlingcredit Device Type    Windows PC OS Name    Windows 8.1 / 2012 Destination IP    104.18.15.109 Host Name    fastpeoplesearch.com Port    443 Country    United States Destination Interface    wan1 Application Application Name    HTTPS Category    unscanned Protocol    tcp Service    HTTPS Data Received Bytes    212 B Received Packets    5 Sent Bytes    809 B Sent Packets    7 Action Action    server-rst Security Action    Blocked Threat    8 Policy    1 Policy UUID    e02340c0-706e-51e8-64e1-e9101bf2f114 Policy Type    policy Security Level     Web events    1 Threat Score    30 Other Source Interface Role    lan Log ID    13 byod_name    SCCserver.sterlingcredit Protocol Number    6 roll    65535 byod_device    windows-pc Log event original timestamp    1602069763 Destination Interface Role    wan dstcountry_code    US Source Server    0 Sub Type    forward utmref    65535-37914 Security Events

 

    5 replies

    Fullmoon
    New Member
    October 7, 2020

    I would craft my url entries like these URL:*.fastpeoplesearch.com,*.google.com Type: Wildcard, Action: Exempt, Status:Enable

    RyanFItz
    RyanFItzAuthor
    New Member
    October 7, 2020
    Thanks I’ll try that