Skip to main content
kssupport
kssupport
Visitor III
October 22, 2025
Solved

help - suddenly some clients can't access reguler website

  • October 22, 2025
  • 4 replies
  • 729 views

hi there,

I need help please.

I use FG60F with firmware 7.2.x

 

I've created firewall policy with webfilter and ssh inspection.

 

suddenly, some computers can't access certain https website, but the other PC still can access the web without issue.

 

if the -problem computers- use direct internet (not via fortinet), they can access the website.

 

where is the issue? anyone has same experience?

 

thank you

Best answer by AEK

7.2.4 is not mature and many Web filter related issues have been fixed after.

Try update to 7.2.12 which is the most stable of the 7.2 version. 

4 replies

AEK
SuperUser
AEK
SuperUser
October 22, 2025

Hi

What the the x in 7.2.x?

Check the workaround mentioned in this fresh post, it is probably the same issue.

https://community.fortinet.com/t5/Support-Forum/Major-lags-with-enabled-web-filter-on-FortiGate-70G-FortiOS-7-4/td-p/415871

AEK
kssupport
kssupportAuthor
Visitor III
October 24, 2025

hi thanks for sharing the link. but seems differnt situation.

 

by the way, the firmware is 7.2.4

AEK
SuperUser
AEKAnswer
SuperUser
October 26, 2025

7.2.4 is not mature and many Web filter related issues have been fixed after.

Try update to 7.2.12 which is the most stable of the 7.2 version. 

AEK
yderek
Staff
yderek
Staff
October 26, 2025

@kssupport  Hi, Thanks for reaching forum 

As AEK mention above, the 7.2.4 isn't the mature version and it's not the lateset version , consider to upgrade to the latesd 7.2.x version after you review the release note of knonw issue 

For the issue you facing now 

-What logs do you see in the forward traffic for the blocked user ? 

-What error does user get from the website when they not able to access ? 

-What ssl inspection profile do you use in the firewall policy 

-Does user using the up to date browser ? 

kssupport
kssupportAuthor
Visitor III
October 29, 2025

hi,

sorry late feedback.

 

- What logs do you see in the forward traffic for the blocked user ?

do you mean PC? however, there is no log under forward traffic, even though I already enabled log for all activity on related firewall policy

-What error does user get from the website when they not able to access ?

site cannot be reached....ERR Connection close

-What ssl inspection profile do you use in the firewall policy

ss inspection based on default, with modify method to full ssl inspection, and some parameter (as attached)

 ssl.PNG

 

web fliter as captured, and I already added wild url to url filter list.

 

-Does user using the up to date browser ? yesweb.PNG

Shyy
Shyy
New Member
October 29, 2025

I'd suggest to try and configure your policy and filter as proxy based if it is currently flow based.

kssupport
kssupportAuthor
Visitor III
March 27, 2026

hi there, after upgrade to mature, the problem solved. thanks all

Terms & ConditionsAccessibility statement