What filter gets applied first

Within a web filter security policy, which get's applied first, the Category filter, or the URL filter?

New Member

Static URL filtering followed by FortiGuard categories. See FD40476 or 11158.

SuperUser

URL filters are get examined first, then Category filters.

The KB is really old but I don't think they've ever changed this order. Otherwise, it would break many policies when it's upgraded.

rc179Author

New Member

So if I turn off the category filter and put a * monitor in the URL filter, I will effectively log all web access.

Sign up