Web filtering not running on secondary link

Question

HI Guys, I have a problem at the company I need help with fortigate 300E v2.6.9, I have a cisco router in front of the fortinet the router receives 2 links, this week one of the links was down and the secondary took over, after that fortigate was not filtering the content using web filter, could this be some error communicating with fortiguard? Maybe because the configured SDWAN only has a link between the firewall and the router with the vpns. I've checked the routing rules and haven't found a way for this to happen, does anyone have any suggestions? I checked, routes, policies, objects in addition to the logs, there was access to blocked sites and categories, I don't know what to check.

Thanks for any help

sjoshi · Answer

Hi VBSjr,

Thank you for posting to the Fortinet Community Forum.

As per your description I can understand that it was working fine and when your internet traffic switched through secondary link webfilter was not working and even the blocked category website was accessible.

So, I believe the fortiguard connectivity was down when it switched through secondary link.

Diag debug rating should be run to check the connectivity status

Please refer this link:-

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Resolving-FDS-Communication-Issues/ta-p/189511

And in the webfilter profile in use you must have enabled Allow websites when a rating error occurs which will allow the websites even in blocked category when the fortiguard connectivity is down.

So please check the fortiguard connectivity post which your issue will be resolved.

Please refer the link below:-

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-FortiGuard-Web-Filtering-problems/ta-p/196965

Let us know if this helps.

Thanks

Sign up

Login with SSO

Login to the community

Login with SSO