Technical Tip: Block the 'gaming' Google site category with a static URL filter without blocking other Google sites

[jhelder]

Description	This article describes how to block Google sites about gaming with a static URL filter without blocking other Google sites.
Scope	FortiGate running FortiOS v6.2+, v6.4+, v7.0+ and v7.2+.
Solution	Google Sites is a wiki and web page creation tool offered by Google. Several new gaming websites make use of it. It may be necessary to block gaming websites without blocking other Google websites. This article will describe how to do that with the example 'sites.google.com/site/mostfungames69'. Use the webfilter with a custom regex static URL filter to block similar sites without blocking Google websites altogether. It is essential to note that a deep inspection profile is necessary for this solution. The targeted gaming sites utilize Google certificates, which means a deep inspection profile is required to accurately identify and control access to these sites. Set up the following configuration: URL: 'sites.google.com*game*' Type: Regex Action: Block Due to the regex filter, only websites that feature 'games' in the URL will be blocked. The configuration on the CLI can be done as follows: config webfilter urlfilter     edit 1         set name <webfilter name>              config entries                 edit 1                     set url sites.google.com*game*                     set type regex                     set action block                     set status enable                 next             end     next end Note: On the firewall policy, set the SSL Inspection Profile to Deep SSL Inspection. These gaming sites use Google's legitimate certificates, and FortiGate cannot see the real hostname without decrypting SSL.