Skip to main content
caimongs
New Member
September 7, 2015
Question

Limit selection PC in network? ( webfilter function)

  • September 7, 2015
  • 1 reply
  • 6883 views

Dear All.

I'm using Fortigate 90D device. I have 70 PCs in my network.

I used web filter function and it work good.

But when i filter some Url or Key word, webfilter funtion block so many useful website.

Now i want to create some policy of filter and add for each of PC/User.

But i don't know how to do that.

I'm using Active Directory with all user, can i synchronize all data of use from AD to 90D?

Can i limit user with this data?

    1 reply

    gschmitt
    New Member
    September 7, 2015

    For LDAP authentication you need to go to

    User&Device > Authentication > LDAP Servers and Create New

    Enter the required informations

    The user only needs read permissions for the LDAP Tree

     

    Now navigate to User&Devices > User > User Groups and Create New

    Create a "Webfilter" group and and select the Create New below Remote Groups

    Add the groups you want

     

    Now go to Security Profiles > Webfilter

    Right click the category you want the group to be able to circumvent

    Set it to Authenticate, select an interval and select the User Group

    caimongs
    caimongsAuthor
    New Member
    September 7, 2015

    gschmitt wrote:

    For LDAP authentication you need to go to

    User&Device > Authentication > LDAP Servers and Create New

    Enter the required informations

    The user only needs read permissions for the LDAP Tree

     

    Now navigate to User&Devices > User > User Groups and Create New

    Create a "Webfilter" group and and select the Create New below Remote Groups

    Add the groups you want

     

    Now go to Security Profiles > Webfilter

    Right click the category you want the group to be able to circumvent

    Set it to Authenticate, select an interval and select the User Group

    Thank you so much for your help. But i'm sorry i don't know how to synchronize all User and password from my server to Fotigate device. if i create 1 by 1 so how can i control or limit user