New Member

Solved

How to block https sites whitout ssl inspection on FortiGate 200A

Forum|Forum|5 years ago
June 24, 2021
5 replies
5632 views

Hello, I am new in your community and I would like to know how to block a https site because in http it works I have the fortigate 200A thanks in advance Sincerely

Best answer by Patel

Hello,

> I would like to know how to block a https site

Are you looking to block a website using web filter or a different security profile?

SSL Inspection is required for FortiGate to identify the website the client is trying to access and block it.

If you know the domain name of the website you want to block, then you can create an FQDN address object on the FortiGate and create a policy to block HTTPS or ALL services traffic to the FQDN address object.

Please refer to the doc below on how to create an FQDN address object.

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/560763/fqdn-addresses

Regards,

Kavin

PatelAnswer

New Member

Hello,

> I would like to know how to block a https site

Are you looking to block a website using web filter or a different security profile?

SSL Inspection is required for FortiGate to identify the website the client is trying to access and block it.

If you know the domain name of the website you want to block, then you can create an FQDN address object on the FortiGate and create a policy to block HTTPS or ALL services traffic to the FQDN address object.

Please refer to the doc below on how to create an FQDN address object.

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/560763/fqdn-addresses

Regards,

Kavin

Link_DarckAuthor

New Member

Hello,

yes I want to block a website and no I don't have SSL inspection and yes I use a web filter

yes I know the domain name is [link]https://www.utorrent.com/[/link]

I have an old fortified which is 200A

here is the screen :

http://neko-world.hd.free..81/Upload/FortiGate.jpg]http://neko-world.hd.free..81/Upload/FortiGate.jpg

New Member

Hello,

Looking at your model you might be running an old firmware version on your FortiGate.

I would say, just use the FQDN address object if the firmware version you are on supports FQDN address objects.

Regards,

Kavin Patel

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.

Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.

Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!