Skip to main content
dmelamed
dmelamed
Explorer
February 14, 2022
Question

url="/" vs url="/SomeURL..."

  • February 14, 2022
  • 1 reply
  • 1799 views

Hi,

 

I noticed that in some of the Fortigate logs the url field is empty and in some of them it is full.

What is the reason?

1 reply

AlexC-FTNT
Staff
AlexC-FTNT
Staff
February 16, 2022

Possibly because the simple domain in log is caused by traffic allowed by a policy where certificate-inspection is used, and not deep-inspection. The /.../... part is in the HTTP header, not in the URL request.

You can fine-tune this in the webfilter log:

config webfilter profile

edit name

set extended-log enable
https://docs.fortinet.com/document/fortigate/6.0.0/cli-reference/753538/webfilter-profile

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.