Skip to main content
jasetcs
jasetcs
New Member
January 15, 2018
Question

Web Filter is blocking sites like the BBC

  • January 15, 2018
  • 2 replies
  • 24606 views

Ive just setup a Fortigate 60E with the latest firmware and its blocking sites like the BBC, Ive set the web filter to block Potentially Liable, Adult/Mature Content & Security risk. Not sure why sites like this are getting blocked?

 

It does come up with an SSL first then i click proceed anyway. Is it something to do with the SSL certificate as when i click "Allow websites when a rating error occurs" it works fine it just shows theres no SSL certificate in the corner which the BBC normally has.

 

Ive read documentation and seems like ive setup correctly can anyone advise please?

2 replies

Itzik_Sharon
Itzik_Sharon
New Member
January 21, 2018

Hello, 

 

Go to: https://fortiguard.com/webfilter 

and put your URL for checking the category. after that is done you can block / permit the policy accordingly. 

 

Regards, 

Itzik Sharon 

 

sw2090
SuperUser
sw2090
SuperUser
January 23, 2018

you say it works when you enable "Allow websites when a rating error occurs". This points me to your webfilter. You should check if you have a valid license for webfilter on your FGT and you should also check if it has connectivity to the FortiGuard(tm) Servers. If either of those two is not fullfilled you will not be able to check the rating of your website which results in blocking it excecpt if you enable the option above.

 

The SSL may be due to your security profiles too. You might have enabled SSL (deep) Inspection. If so your FGT will catch a https connection and hand it over to your pc using its own (self signed) certificate which will result in what you get. The FGT will then be "man in the middle" to be able to inspect the data that goes over this connection. 

This can only be avoided by either install the Fortinet CAs used to sign that cert or buy some cert from a CA that is accepted by the browsers and install that onto the FGT.

Terms & ConditionsAccessibility statement