Blocking Of Malicious Websites

[thedude78]

Hello,

I am new to Fortigate.  I have recently taken a positition, and am now administering a FG-1500D.  I have noticed that the Device is currently not filtering "Malicious" or "Unrated" websites.  I am not sure if this was turned off because of false positives in the past etc.  I would like to get some feedback from others in the community.  Also If I am seeing sites classed as "Malicious" is there a database I can access to review why a site was added or categorized this way?

Thanks!

[rpbmurrell_FTNT · Accepted solution]

Dan,

You can access https://fortiguard.com/webfilter and enter the URL in the URL/IP Rating field to see the rating and more information about the site. In general, security admins enable the malicious category; however, the unrated category is different as it can lead to blocking legitimate sites as unrated refers to web sites that have simply not been rated by the FortiGuard team. Enabling that category is really determined by your security posture. In other words, do you want to block everything and only allow specific sites?

[JayAndrews]

Hey team, I have a partner asking the following questions :

"I would also be interested in what are the expected response times and the best method to use to submit them.  Today we are using the public website for submission of URLs. "

Any advice?