Skip to main content
pre
New Member
February 20, 2025
Question

Web Filtering Tests not working?

  • February 20, 2025
  • 3 replies
  • 1050 views

Hello all

I wonder if the Test pages for Web Filtering work as expected?
i.e. https://fortiguard.fortinet.com/wftest/14.html does not get blocked although i blocked the category in my web filter.

 

First i thought it might be an issue in my filter settings, however a friend of mine (who administer another firewall) reports the same.

 

Does the page above get filtered by your filters?

 

Best regards

3 replies

sjoshi
Staff
Staff
February 20, 2025

Hi,

 

How have you tried blocking the url. What logs you are getting on webfilter and forward traffic logs.

Can you follow below article and try blocking it

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-a-static-URL-filter-feature-to-allow-block/ta-p/193086

Thanks, Salon
AEK
SuperUser
SuperUser
February 20, 2025

Hi Pre

If I'm not wrong you need to use deep inspection in order to block the mentioned URL, because certificate inspection can't see the full URL, it sees only the certificate, and it can check the category only depending on the certificate info, not the full URL.

AEK
pre
preAuthor
New Member
February 21, 2025

Hello all

Thank you very much for your replies.
I think i need to rephrase my question:
Is the page https://fortiguard.fortinet.com/wftest/14.html (or any other test page) blocked with your Web filtering?

I noticed the following:

  • Request to a real page: -->Web filter blocks the page, which is fine
  • Request to the test page --> The Web filter allows the request, which is strange. Any Test pages are not blocked.

 

Are the test pages properly blocked i.e. with a Adult site filter in your setup?
If not, i do not need to worry about my setup, but can assume that the test pages are not properly categorized by Forti
If they are blocked, i will need to review my setup

 

AEK
SuperUser
SuperUser
February 21, 2025

The simple answer is: Yes the test page worked for me when I used deep inspection, but didn't work for me when I used certificate inspection.

AEK