URL categories rules

Forum|Forum|2 years ago
October 23, 2023
6 replies
3051 views

Hello,
I'd like to ask your advice. I am building policies for my FortiGate and I am creating policies for URL categorization on AD groups (students at school
I want to ask what approach you prefer and what impact it will have on the firewall performance.
1. Disallowing blocked categories (**bleep**, spam, etc) and then only allowing all HTTP and HTTPS
2. Setting allowed categories on given user groups.

Thank you.

FortiGate

Best answer by xshkurti

@Kubajs
It doesn't matter. It will not affect performance.
In your case you should consider:
1. Allow http https
2. Allow categories based on AD user groups
3. Block everything else.

Hong_FTNT

Staff & Editor

Hi @Kubajs,

Web filter allows/denies traffic based on categories. You can create different web filter profiles for different user groups.

Regards,

KubajsAuthor

Explorer

Hello @hbac ,

I know that, I just want to know, what is better for FortiGate performance.

Or does it not matter?

Thanks

xshkurtiAnswer

Staff

@Kubajs
It doesn't matter. It will not affect performance.
In your case you should consider:
1. Allow http https
2. Allow categories based on AD user groups
3. Block everything else.

KubajsAuthor

Explorer

Thank you very much. That's what I wanted to know :)

Sign up

Login with SSO

Login to the community

Login with SSO