Static URL Filter question

Forum|Forum|9 years ago
July 20, 2017
5 replies
15399 views

Hi,

should static entries have a higher priority than FortiGuard category based filter for both Block and Allow action?

I ask because I blocked Bandwidth Consuming category and then added a static URL rule *youtube.com with Allow action, but the youtube is still blocked.

The opposite works well: When Bandwidth Consuming is allowed and I add static *youtube.com with Block action, then only youtube is blocked and other sites like vimeo.com are not blocked.

1.jpg

5.4

emnoc

New Member

Qeustions:

Do you have two policies for the category and static URL?

Did you run diag debug flow to ensure your hitting the policyid that your expecting

Is SSL inspection enabled?

kcerbAuthor

New Member

Hi emnoc,

For testing I created Web Filter profile, then policy with that profile. I placed this policy on top of other policies.

I can see in log it uses that policy:

Yes, the policy uses deep-inspection. It works the same way when I change to certificate-inspection. If in that Web Filter profile I change category to "allow" and edit static URL entry "*youtube.com" and change its action to "block", then it work as I expect: it blocks only youtube, not e.g. vimeo.

2.jpg

emnoc

New Member

So what did the diag debug flow output show you?

Sign up

Login with SSO

Login to the community

Login with SSO