Technical Tip: Blocking access to websites URL directories and allowing the root website using static URL filter

[dbhavsar]

Description	This article describes how to access the root domain site while blocking its sub domains.
Scope	FortiGate.
Solution	For example, the configuration below shows how to allow www.oracle.com while blocking www.oracle.com/java/technologies/downloads/ The website 'www.oracle.com' belongs to the General Interest, Information Technology category, which is allowed in the following screenshot. The web-filter is configured as follows: The firewall policy is configured as follows: As shown in the screenshot, www.oracle.com is accessible and www.oracle.com/java/technologies/downloads/ throws a blocked page. For more information on how breakdown component in URL is done refer to this article and actions can be configured accordingly.    Note: Deep Packet Inspection must be used in the policy or else the web-filter will not be able to block the exact destination URL.