Technical Note : Unrated FortiGuard Web filtering category when upgrading between major versions of FortiOS

[rmetzger]

Description
On rare occasions, when upgrading between major versions of FortiOS, some FortiGuard Web filtering categories that were defined in a webfilter profile might no longer exist, such as for example category 60.

If the action for category 60 was set to "block", after the upgrade the filter entry 60 might still exist, but without a category, and with the original action = block.

Example after an upgrade from 4.2.11 to 4.3.11 :

config webfilter profile
  edit "test"
   config ftgd-wf
      config filters
                        edit 60
                            set action block
                        next
      end
  end
end

This would result in blocking all unrated Web sites.

This can be verified by looking for the following messages after an upgrade :

FGT # diagnose debug config-error-log read
>>>  "set" "category" "60" @ root.webfilter.profile.test-unrated.ftgd-wf.filters.60:value parse error (error -600)

If those messages appear, please check in profile mentioned in the field <profile.path> and delete empty categories. Keep however one for the unrated category and with appropriate action (if necessary).

Scope

Example on a 50B before and after :


Running 4.2.11
===========

FWF50B3G07503140 # show webfilter profile test-unrated
config webfilter profile
    edit "test-unrated"
            config http
                set options fortiguard-wf
            end
            config ftgd-wf
                set allow 1 7 17 24 28 49 54 g21 g22
                set deny 2 3 4 5 6 57 58 59 60 61 62 83 8 9 11 12 13 14 15 16 63 64 65 66 67 18 19 20 23 68 69 70 71 25 72 75 76 g05 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 46 47 48 77 78 79 80 50 51 52 53 84 55 56 81 82 85 c01 c02 c03 c04 c05 c06 c07
            end
        set web-ftgd-err-log enable
    next
end


Upgrade to 4.3.11
=============
config webfilter profile
    edit "test-unrated"
            config ftgd-wf
                unset options
                    config filters
                        edit 2
                            set action block
                            set category 2
                            set log disable
                        next
                        edit 3
                            set action block
                            set category 3
                            set log disable
                        next
                        edit 4
                            set action block
                            set category 4
                            set log disable
                        next
                        edit 5
                            set action block
                            set category 5
                            set log disable
                        next
                        edit 6
                            set action block
                            set category 6
                            set log disable
                        next
                        edit 8
                            set action block
                            set category 8
                            set log disable
                        next
                        edit 9
                            set action block
                            set category 9
                            set log disable
                        next
                        edit 11
                            set action block
                            set category 11
                            set log disable
                        next
                        edit 12
                            set action block
                            set category 12
                            set log disable
                        next
                        edit 13
                            set action block
                            set category 13
                            set log disable
                        next
                        edit 14
                            set action block
                            set category 14
                            set log disable
                        next
                        edit 15
                            set action block
                            set category 15
                            set log disable
                        next
                        edit 16
                            set action block
                            set category 16
                            set log disable
                        next
                        edit 18
                            set action block
                            set category 18
                            set log disable
                        next
                        edit 19
                            set action block
                            set category 19
                            set log disable
                        next
                        edit 20
                            set action block
                            set category 20
                            set log disable
                        next
                        edit 23
                            set action block
                            set category 23
                            set log disable
                        next
                        edit 25
                            set action block
                            set category 25
                            set log disable
                        next
                        edit 26
                            set action block
                            set category 26
                            set log disable
                        next
                        edit 29
                            set action block
                            set category 29
                            set log disable
                        next
                        edit 30
                            set action block
                            set category 30
                            set log disable
                        next
                        edit 31
                            set action block
                            set category 31
                            set log disable
                        next
                        edit 32
                            set action block
                            set category 32
                            set log disable
                        next
                        edit 33
                            set action block
                            set category 33
                            set log disable
                        next
                        edit 34
                            set action block
                            set category 34
                            set log disable
                        next
                        edit 35
                            set action block
                            set category 35
                            set log disable
                        next
                        edit 36
                            set action block
                            set category 36
                            set log disable
                        next
                        edit 37
                            set action block
                            set category 37
                            set log disable
                        next
                        edit 38
                            set action block
                            set category 38
                            set log disable
                        next


                        edit 39
                            set action block
                            set category 39
                            set log disable
                        next
                        edit 40
                            set action block
                            set category 40
                            set log disable
                        next
                        edit 41
                            set action block
                            set category 41
                            set log disable
                        next
                        edit 42
                            set action block
                            set category 42
                            set log disable
                        next
                        edit 43
                            set action block
                            set category 43
                            set log disable
                        next
                        edit 44
                            set action block
                            set category 44
                            set log disable
                        next
                        edit 46
                            set action block
                            set category 46
                            set log disable
                        next
                        edit 47
                            set action block
                            set category 47
                            set log disable
                        next
                        edit 48
                            set action block
                            set category 48
                            set log disable
                        next
                        edit 50
                            set action block
                            set category 50
                            set log disable
                        next
                        edit 51
                            set action block
                            set category 51
                            set log disable
                        next
                        edit 52
                            set action block
                            set category 52
                            set log disable
                        next
                        edit 53
                            set action block
                            set category 53
                            set log disable
                        next
                        edit 55
                            set action block
                            set category 55
                            set log disable
                        next
                        edit 56
                            set action block
                            set category 56
                            set log disable
                        next
                        edit 57
                            set action block
                            set category 57
                            set log disable
                        next
                        edit 58
                            set action block
                            set category 58
                            set log disable
                        next
                        edit 59
                            set action block
                            set category 59
                            set log disable
                        next
                        edit 60
                            set action block
                            set log disable
                        next
                        edit 61
                            set action block
                            set category 61
                            set log disable
                        next
                        edit 62
                            set action block
                            set category 62
                            set log disable
                        next
                        edit 63
                            set action block
                            set category 63
                            set log disable
                        next
                        edit 64
                            set action block
                            set category 64
                            set log disable
                        next
                        edit 65
                            set action block
                            set category 65
                            set log disable
                        next
                        edit 66
                            set action block
                            set category 66
                            set log disable
                        next
                        edit 67
                            set action block
                            set category 67
                            set log disable
                        next
                        edit 68
                            set action block
                            set category 68
                            set log disable
                        next
                        edit 69
                            set action block
                            set category 69
                            set log disable
                        next
                        edit 70
                            set action block
                            set category 70
                            set log disable
                        next
                        edit 71
                            set action block
                            set category 71
                            set log disable
                        next
                        edit 72
                            set action block
                            set category 72
                            set log disable
                        next
                        edit 75
                            set action block
                            set category 75
                            set log disable
                        next
                        edit 76
                            set action block
                            set category 76
                            set log disable
                        next
                        edit 77
                            set action block
                            set category 77
                            set log disable
                        next
                        edit 78
                            set action block
                            set category 78
                            set log disable
                        next
                        edit 79
                            set action block
                            set category 79
                            set log disable
                        next
                        edit 80
                            set action block
                            set category 80
                            set log disable
                        next
                        edit 81
                            set action block
                            set category 81
                            set log disable
                        next
                        edit 82
                            set action block
                            set category 82
                            set log disable
                        next
                        edit 83
                            set action block
                            set category 83
                            set log disable
                        next
                        edit 84
                            set action block
                            set category 84
                            set log disable
                        next
                        edit 85
                            set action block
                            set category 85
                            set log disable
                        next
                        edit 86
                            set action block
                            set category 86
                            set log disable
                        next
                        edit 87
                            set action block
                            set category 87
                            set log disable
                        next
                    end
            end



goto http://www.seriespartners.fi/ :
=================================================================
Web Page Blocked!
You have tried to access a web page which is in violation of your internet usage policy.

URL: www.seriespartners.fi/
Category: Unrated

To have the rating of this web page re-evaluated please click here.
=================================================================