Skip to main content
CVB1
Explorer
Aug 1, 2023 7:18 PM UTC
Solved

Monitor policy block https trafic

I have a problem with a page that is https for example https://www.ilovepdf.com/es.
When I use the webfilter profile or the appcontrol in a policy, even if it is only in a monitor way, these pages are blocked. SSL inspection only logs, doesn't block anything. Can you help me with this topic?

Thanks

CVB1
CVB1Answer
Explorer
Aug 4, 2023 2:57 PM UTC

Fix the problem with the following video https://www.youtube.com/watch?v=7qTM3AI8Cp4

11 replies

adambomb1219
SuperUser
SuperUser
Aug 1, 2023 10:05 PM UTC

What exactly are you seeing in the logs?  What is the reason for the block?  What security profile is blocking the webpage?  Web filter?

CVB1
CVB1Author
Explorer
Aug 1, 2023 10:41 PM UTC

I don't see any records of the block in the logs, I use web filter and app control. I search the logs, check all the user logs and nothing.

jsarah
Staff
Staff
Aug 2, 2023 3:45 AM UTC

could you please share the block message seen in browser , when you are trying to load the website.

CVB1
CVB1Author
Explorer
Aug 2, 2023 2:30 PM UTC

I attach a photo of the 2 pages that we have a problem for now.

 

srtart.jpgilovepdf.jpeg

FortiNitish
Staff
Staff
Aug 2, 2023 5:55 AM UTC

The site https://www.ilovepdf.com/es. is categorized as Web based Applications in fortiguard.

Could you please check if this specific category under "Fortiguard category based filter " is set to block/ monitor.

CVB1
CVB1Author
Explorer
Aug 2, 2023 2:36 PM UTC

it's not blocked. I attached print screen of my security profiles

image.png

 

 

web filterweb filterweb filterweb filterapp controlapp controlfile filterfile filterssl inspectionssl inspection

mhemambika
Staff
Staff
Aug 7, 2023 10:16 AM UTC

Hi CVB,

Could you please create the test policy for one of the affected user and try removing all the UTM features and check whether the site is blocking or not.

If its working you can try adding each UTM feature and check which UTM feature causing the site to get blocked.

jsarah
Staff
Staff
Aug 2, 2023 6:16 AM UTC

Hi,

 

You can check the web rating here : https://www.fortiguard.com/webfilter

 

 

 

 

CVB1
CVB1Author
Explorer
Aug 2, 2023 2:32 PM UTC

Thanks, I'll check the urls.

CVB1
CVB1AuthorAnswer
Explorer
Aug 4, 2023 2:57 PM UTC

Fix the problem with the following video https://www.youtube.com/watch?v=7qTM3AI8Cp4

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT