Skip to main content
rb400
rb400
New Member
March 25, 2015
Solved

Webfilter (licensed) vs Application Control

  • March 25, 2015
  • 2 replies
  • 10831 views

Re: Webfilter (licensed) vs Application Control

 

Which process looks at the packet first, app control or webfilter.

If webfilter, and webfilter exempts a url, will the packet bypass the app control process?

 

Is there any known specific doc on this topic?

 

Thanks.

    Best answer by Dave_Hall

    See Life of a Packet.  Link is from the FortiOS 5.2 Handbook.

     

    2 replies

    Dave_Hall
    Dave_HallAnswer
    New Member
    March 25, 2015

    See Life of a Packet.  Link is from the FortiOS 5.2 Handbook.

     

    Christopher_McMullan
    Staff
    Christopher_McMullan
    Staff
    March 25, 2015

    Historically, at least, IPS and App Control were applied before Web Filter profiles, since they are both flow-based.

    So a good example would have a been a case where an administrator applied an App Control sensor to block Facebook, but also blocked the Social Networking category in a web filter. The app would be blocked, but the user would not see a replacement message (which would have been generated in the case of a proxy-based WF profile).

     

    Exempting a site in a WF profile in this case would not affect IPS or App Control, since they would have already been checked.

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.