Skip to main content
osama_mansoor
New Member
December 15, 2020
Question

Fortinet Firewall Report Issues

  • December 15, 2020
  • 1 reply
  • 5806 views

Hi Experts,

 

We have a newly deployed Fortigate firewall now we have some concerns regarding reporting.

 

Under "Most Visited Web Categories and Web Sites" there is the column "Estimated Browsing Time" as I understand it to reflect how the total time of users expands on a particular link but for some reasons, the "Estimated Browsing Time" is showing 00h 00m 00s but I known our user has surf this link so what is the meaning if its 0 means it is showing block. 

 

 

1 reply

osama_mansoor
New Member
December 16, 2020

Please reply.

andrewbailey
New Member
December 16, 2020

Hi Osama,

 

The detail you are after is based on the web filtering on the Fortigate. So a few things to check:-

 

1. Do you have a valid licence for web filtering?

2. You need to have setup a "web filter" security profile and applied that filter to the policies you want to monitor.

3. When you configure the "web filter" the categories you want to monitor need to be set to "monitor". "block" will be reported (and access to sites prvented), but if you use the default "allow" option on the profile then the web traffic just passes through and will not be "monitored" as you seem to be wanting. There is a default "monitor-all" web filter which you could use on your policies for testing.

 

You could also check the admin guides- https://docs.fortinet.com/document/fortigate/6.4.4/administration-guide/833698/web-filter describes how to configure and setup the web filter correctly.

 

I hope that helps you move forward.

 

Kind Regards,

 

 

Andy.

osama_mansoor
New Member
December 17, 2020

Thanks, Andy Bailey for your response.

 

Below are my responses to your questions.

 

1. Do you have a valid license for web filtering?

Yes we have a valid license.

 

2. You need to have setup a "web filter" security profile and applied that filter to the policies you want to monitor.

Yes, we have a different profile level which is based on users' grade-level like we have Officers, Managers, and Executives, and based on grade level we have to allow and block different web filter categories.