Issues blocking the " unrated" category?

Not quite... Unrated is not the same as a rating error. Unrated could simply mean that page hasn' t been evaluated yet or assigned to a category or (far more likely), the IP of the server hosting the page doesn' t have a rating of its own - especially in the case of shared hosting. When the FortiGate fails to get a response from FortiGuard to a website category query, a rating error occurs. The default behavior is to block the client' s session. You can also choose, under the webfilter profile' s advanced settings, to Allow Websites When a Rating Error Occurs. In this case, no one will be denied web access simply because of FGD connectivity issues. This obviously opens up security loopholes which would need to be addressed as quickly as possible, but it wouldn' t nearly be the show-stopper that lack of Internet is. Unrated, by comparison, is normal. You' d likely come across it if you choose to rate URLs by domain and IP. In this case, the website has a rating that could be completely different, not just distinct, from the server IP. For a while, www.callofduty.com and the website for the Embassy of the Republic of India in Washington, D.C. both had sites rated correctly (i.e., Gaming and Government), but the servers hosting them were rated as Dynamic Content. The FortiGate needs a tiebreaker decision on which action to apply: what if you block Gaming but allow Dynamic Content? It used to be that Strict Blocking took the most severe of the actions you apply to the two categories. That was phased out or deprecated over time. The new regime is to give each category a weighting, or a severity. Dynamic Content has a higher severity than Gaming, so the action you apply to Dynamic Content will be the action applied to the session when you rate by both domain and IP. So... -Allow websites when a rating error occurs *AND* -Consider disabling the act of rating URLs by domain and IP, at least temporarily. You should notice a drastic improvement, in that, the complaints will stop coming in. Then you can decide how to address both options.