Skip to main content
Explorer II
Sep 17, 2026 3:16 PM UTC
Question

uRL Exclude Application Securtiy

I have already defined a URL exclusion rule for URLs containing wildcards and selected the “exempt from action” option. However, access permission for these URLs is still not working.

 

 

9 replies

wmichael
Staff
Staff
Sep 17, 2026 3:26 PM UTC

In your screenshot you have set the web filter action to “allow”, not “exempt”. When the action is “allow” and web filter categories are used in addition to static URL filters, the category will be checked after the static URL filter allows it.  Checking “www.ziraabank.com.tr” https://www.fortiguard.com/webfilter, shows this URL is categorized as “Newly Observed Domain”. On the default webiflter profile the category “Newly Observed Domain” is blocked by default.  You need to set the action to “exempt” to bypass the category lookup. Also, you did not put a wild card “*” in the URL.

See the following article for more information on using static URL filters: 

 

Dzhem35Author
Explorer II
Sep 17, 2026 3:39 PM UTC

Probably ı sent wrong screenshot, before ı changed it it was in wildcard and aciton was exempt. Also ı sent an review request to fortiguard

Dzhem35Author
Explorer II
Sep 17, 2026 3:44 PM UTC

Here is the current settings

wmichael
Staff
Staff
Sep 17, 2026 4:01 PM UTC

That should bypass the category lookup.  If the traffic is being blocked I would recommend checking the traffic logs or any relevant security logs as to why the traffic is being blocked.  You also added a screenshot of application control.  Is application control blocking it?  Keep in mind application control is checked before the web filter.

 

 

Dzhem35Author
Explorer II
Sep 21, 2026 8:54 AM UTC

As you can see Applciation Control is blocking this uRL but ı already gave exclude to category.

 

Explorer II
Sep 22, 2026 3:49 AM UTC

​@Dzhem35 As per above screenshot, I see your firewall policy (you may check what action is set to that policy ID) is denying this traffic. Can you please recheck it.

Toshi_Esumi
SuperUser
SuperUser
Sep 17, 2026 4:25 PM UTC

Did you mean to have a wild card like “www.ziraatbank.com.tr/*”? Without the wildcard letter ‘*’, it wouldn’t allow like “www.ziraatbank.com.tr/tr/bireysel”.
The “Type” selection is just a format selection, not the actual wild card. You have to put the wildcard in in the URL box above.

Toshi

Explorer II
Sep 19, 2026 6:47 PM UTC

Hi,

Did you check whether this traffis is allowed in a firwal policy for tcp443 or for requiered port, 

If so ensure that you have no deny entry above this ziraatbank.com.tr whitelist. And ensure whether this site is redirdcting you to any other site.

 

And it would be helpful, if you post the error message

 

Thanks

Sep 21, 2026 9:25 AM UTC

Hello,


Which SSL/SSH Inspection profile is used by policy ID 1?

What is the configuration of this profile?

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT