The 'malicious website' category is 'blocked' but still opening

Forum|Forum|2 years ago
August 1, 2024
3 replies
1366 views

Dear Concern,

There is a website that I checked in 'Web Rating Override', and its category is 'malicious website'. opening. Why?

I have blocked the 'malicious website' category in the 'DNS Filter' and 'FortiGuard Category Based Filter'. Yet, the website is still opening. Why?

How can I troubleshoot or check.

FortiGate

hgarara

Staff

Hello @Mirza_Asad2723,

Can you please share the firmware version of fortigate and how is the policy being set up?

Thank you,

Hemil

dbhavsar

Staff

Hello @Mirza_Asad2723 ,

- you can use the cert-inspection in the policy and try switching between proxy/flow-based mode of the policy. Make sure you clear cache before testing and after making changes on FortiGate.

dkochhar

Staff

Hello @Mirza_Asad2723

Can you please check which policy does the traffic goes from ? Please check it in forward logs by specifying source IP from where you are testing this website.
and please make sure you have DNS profile attached to it.

Sign up

Login with SSO

Login to the community

Login with SSO