Skip to main content
vidyashankar
New Member
August 7, 2015
Question

websites blocking

  • August 7, 2015
  • 3 replies
  • 3275 views

hai,

I am using fortigate 60D in our office. here some 50 clients are using internet. in this case i want to block youtube and facebook for all the users. except 1pm to 3pm it should be opened. is there any possibilities for this request.

 

 

    3 replies

    gschmitt
    New Member
    August 7, 2015

    Easy as pie

     

    Go to Security Profiles > Webfilter and create a new profile with the + symbol top right corner

    Name it Blocked_FaceTube

    Enable URL Filter > Create New

    enter facebook.com and youtube.com

    Configure the rest as needed

    hit Apply

     

    Now to go Policy&Objects > Objects > Schedules

    Create new

    name it FaceTube time and select the times as needed (Sun-Sat; 1pm to 3pm)

    And click OK

     

    Now go to Policy&Objects > Policy > IPv4

    Create New

    Source Interface Internal (local lan)

    Source Address all (local subnet)

    Destination Interface wan1 (internet facing interface)

    Destination all

    Schedule FaceTube Time

    Enable NAT

    Configure the rest as needed

     

    Create a new policy as above but:

    Schedule always

    Enable Web Filter profile Block_FaceTube

     

    Now navigate to your internal > wan1 policies and make sure the FaceTube Time policy is above the second one

    vidyashankar
    New Member
    August 7, 2015

    Thanks a lot.. it is very much helpful.

    SecurityPlus
    Explorer III
    August 8, 2015

    gschmitt, if OK with you I will use the recommendations you created above and will modify them slightly to match this request. I will try to mark my edits to your earlier post in [style="background-color: #ffff00;"]yellow[/style].

     

    vidyashanker, this should block facebook.com and youtube.com from 3pm to to 1pm the following day. Please test to assure that it gives you the proper result.

     

    Go to Security Profiles > Webfilter and create a new profile with the + symbol top right corner Name it Blocked_FaceTube Enable URL Filter > Create New enter facebook.com and youtube.com Configure the rest as needed hit Apply   Now to go Policy&Objects > Objects > Schedules Create new

    [style="background-color: #ffff00;"][<font][<font]Type Recurring[/style]

    [style="background-color: #ffff00;"][<font]name it [<font]Blocked_FaceTube_time[/style]

    [style="background-color: #ffff00;"][<font]Days Select all days Sunday through Saturday[/style]

    [style="background-color: #ffff00;"][<font][<font]Start Time Hour 3pm minutes 00 [/style]

    [style="background-color: #ffff00;"][<font][<font]Stop Time [<font][<font][<font]Hour 1pm minutes 00[/style] And click OK   Now go to Policy&Objects > Policy > IPv4 Create New Source Interface Internal (local lan) Source Address all (local subnet) Destination Interface wan1 (internet facing interface) Destination all Schedule [style="background-color: #ffff00;"]Blocked_FaceTube_time[/style]

    [style="background-color: #ffff00;"]Enable Web Filter profile Block_FaceTube[/style] Enable NAT Configure the rest as needed   Create a new policy as above but:

    Source Interface Internal (local lan) Source Address all (local subnet) Destination Interface wan1 (internet facing interface) Destination all Schedule always Enable NAT Configure the rest as needed

      Now navigate to your internal > wan1 policies and make sure the FaceTube Time policy is above the second one

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!