Skip to main content
bfig90
Explorer
November 1, 2024
Question

Web Filter Profile for Off-fabric devices

  • November 1, 2024
  • 1 reply
  • 1263 views

Dear,

 

Is there an option to configure Web Filter Profile and Video Filter so it cannot be always on for BYOD or off fabric devices ? I want to be enabled only while the user is connected to VPN.

1 reply

johnathan
Staff
Staff
November 1, 2024

You should be able to enable off-net profiles in whatever policy you have for the users. Once enabled, you can just select a different Web Filter and Video Filter profile for users whom are off-net. 
See: https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/519742/adding-an-endpoint-policy

Never trust a computer you can't throw out a window.
bfig90
bfig90Author
Explorer
November 1, 2024

Yes. I have already distinguished the policies but i cannot find the option to tell that: Do the web filter only when you are in VPN connection 

johnathan
Staff
Staff
November 1, 2024

Ah, here is how to actually have the EMS server detect if the user is off or on fabric: https://docs.fortinet.com/document/forticlient/7.4.0/ems-administration-guide/303940/on-fabric-detection-rules

Never trust a computer you can't throw out a window.