Skip to main content
luccap07
New Member
November 4, 2024
Question

Web Filter issues

  • November 4, 2024
  • 5 replies
  • 2016 views

Hello everyone.
I am encountering difficulties with our FortiGate 200E device at the company.
We are utilizing the web filter to control content access, however, we are observing inconsistent blocking behavior.
Specifically, when Proxy mode is enabled, certain categories of content are not being blocked as expected, despite being configured to do so. Conversely, when switching to Flow mode, the device is over-blocking content and miscategorizing websites. For instance, OneDrive is being classified as an abortion site, and YouTube is categorized as unknown.
I have already attempted to resolve this issue by updating firmware, cleaning the cache and implementing new rules, but the problem persists.
I would appreciate any insights or experiences that you may have regarding this matter. Thank you.

5 replies

AEK
SuperUser
SuperUser
November 4, 2024

Hello

Does it happen in flow mode as well?

What do you see when you test rating lookup?

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-determine-the-category-of-a-website-or/ta-p/291086

It should match when you do it from your FG and from FortiGuard. Does it match?

AEK
luccap07
luccap07Author
New Member
November 5, 2024

Hello!
Flow mode seems to be working better than proxy mode. It's blocking more sites (including allowed ones).
I tested the link you sent, and it doesn't match what's happening. I tested Amazon's website, which is classified as Shopping, but it's being blocked and treated as unknown.

SAJUDIYA
Staff
Staff
November 5, 2024

@luccap07 Make sure that your web filter is in flow mode and it is able to identify category.

 

If you see category shows unknown then please provide screenshot of error and also provide log output.

AEK
SuperUser
SuperUser
November 5, 2024

Hi Lucca

Which FortiOS version?

AEK
dingjerry_FTNT
Staff
Staff
November 11, 2024

Hi @luccap07 ,

 

Could you please show your firewall policy settings and/or the relevant log messages in this issue?

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.