Web Filter Alerts

Question

Hi everyone,

We are moving our School environment over to a Fortigate 100F with 5 year UTM - and after setting up our web filtering profiles, I am looking for a way to setup email notifications when certain categories are blocked.

For example, if a member of X group attempts to go to a website categorised as Adult content. When it is blocked, we would like an email to be sent detailing the user and the website.

Is this possible with the current licensing we have in place or do we need to look into alternatives like FortiAnalyzer? Is this even possible with FortiAnalyzer?

Any help is appreciated.

sthampi_FTNT · Accepted Answer

Hi Mmat,
It is currently not possible to send an alert email for a 'specific category or users' using Automation stitch on the Fortigate.

However, this can be achieved by using a FortiAnalyzer event handler, by following the steps mentioned in the previous comment.

If this answers your query, please mark the reply as an accepted solution.

sthampi_FTNT · Answer

Hi Mmat,

Yes, this can be achieved by using Automation stitches in a Fortigate, action=send an email, trigger=webfilter violation. Following articles explain the same:

https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/526019/email-alerts

https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/733368/event-log-category-triggers

Additionally, if you also have a FortiAnalyzer, alert emails can be sent from them too, by filtering a specific logid, explained more in the following articles;

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-configure-email-alerts-for-configuration/ta-p/194727

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-How-to-configure-email-alerts-for-configuration/ta-p/190511

Sign up

Login with SSO

Login to the community

Login with SSO