Skip to main content
Mes-Lili2
Mes-Lili2
Explorer III
October 11, 2023
Question

Web Filter Issue

  • October 11, 2023
  • 11 replies
  • 4550 views

I have a basic policy with web filter as below...    when I browse to the site listed as blocked it allows me out on the same policy.  perhaps I have missed something obvious here,... 

 

FSSO4-Error.png

and here is the web filter

 

FSSO3-Error.png

11 replies

dbu
Staff
dbu
Staff
October 11, 2023

Hi @Mes-Lili2 ,

Have a look at these tips here :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-Static-URL-filter-actions-explained/ta-p/206632

dbu
Staff
dbu
Staff
October 11, 2023

I just did a fresh config in the lab like this : 

webfilter.PNG

 

polic.PNG

 

ches.PNG

 

 

Make sure you are matching the correct firewall policy!

    Mes-Lili2
    Mes-Lili2Author
    Explorer III
    October 12, 2023

    OK thanks for the example,   but what would you do if you just wanted that policy to allow access to only www.cheese.com, would you simply set  to allow.  this is what i have done for microsoft .com only but my test connection to my own website is using the  policy allows the traffic through. and the logs show the policy used.

    FSSOA-Error.pngFSSOB-Error.pngFSSOC-Error.pngFSSOD-Error.png

    hbac
    Staff
    hbac
    Staff
    October 11, 2023

    Hi @Mes-Lili2,

     

    Can you check webfilter logs and make sure the URL is matching the one you configured under static URL filter. 

     

    Regards, 

    Mes-Lili2
    Mes-Lili2Author
    Explorer III
    October 11, 2023

    Where are the webfilter logs…”?”?

    hbac
    Staff
    hbac
    Staff
    October 11, 2023

    It depends on FortiOS version, you can check Log & Report -> Web Filter. Or Log & Report -> Security Events > Web Filter

    dbu
    Staff
    dbu
    Staff
    October 11, 2023

    Depending on the version, it either shows directly  Log & Report > Web filter or Log & Report > Security Events > Web filter

      Mes-Lili2
      Mes-Lili2Author
      Explorer III
      October 11, 2023

      Log report shows no option for web filter and security events shows “no results” in main window.

      dbu
      Staff
      dbu
      Staff
      October 11, 2023

      Check this article might help: 
      https://community.fortinet.com/t5/FortiGate/Technical-Tip-Web-filter-logs-are-not-visible-and-getting/ta-p/195218

      It will show like this : 

       

      blocked.PNG

        mahesh_pm
        mahesh_pm
        Explorer
        November 11, 2023

        Hi,

        try creating a web filter profile in proxy mode and also create the policy in proxy mode.

         

        Regards

        Mahesh

        Terms & ConditionsAccessibility statement
        Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
        Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!