FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
salemneaz
Staff
Staff
Article Id 416915
Description This article describes how to block Google Gemini using Static Web Filter 
Scope FortiGate
Solution

Sometimes organization may require to block Google Gemini AI. It could be done using the static URL filter on the Firewall.

 

Go to Security Profiles -> Web Filter and edit the Web Filter profile that is assigned to the policy that the outgoing traffic towards the Google destination is matched with.  From 'Static URL Filter', enable 'URL filter' (if it has not been enabled already) and select 'Create New'. Configure the URL filter as follows:

  • URL: *.gemini.google.com*
  • Type: Wildcard
  • Action: Block
  • Status: Enable

 

Screenshot 2025-10-28 081811.jpg

 

This will work with the certificate inspection. A deep inspection profile is not required. 

 

The configuration on the CLI is as follows:

 

config webfilter urlfilter
    edit 1
        set name "webfilter"
            config entries
                edit 1
                    set url "*.gemini.google.com*"
                    set type wildcard
                    set action block
                    set status enable
                next
            end
        next
    end