FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
rmharini
Staff
Staff
Article Id 285004
Description

 

This article describes how to customize distinct replacement message for static and FortiGuard Category Based URLs.

 

Scope

 

FortiGate.

 

Solution

 

  1. Configure a replacement message group and set the group type to 'security'. When the group type is defined as 'authentication', it can be used in policies but not in web filter profiles.

    Note that the 'auth' group type does not include a URL block page replacement message. Customize the replacement message to appear on the block page for users.

config system replacemsg-group

edit "Block-security"

set comment ''
set group-type utm

next

end

 

  1. The following example demonstrates 'www.example.com' configured in the static URL and blocked while the other settings within the FortiGuard Category-Based filter remain unchanged.

config webfilter profile

edit "web-filter"

set replacemsg-group "Block-security"

config web

set urlfilter-table 1

end

config ftgd-wf

unset options

config filters

-------

next

end

 

image.png

 

  1. Use the web-filter profile configured into the security policy.

  2. Below are the results when attempting to access the static URL 'www.example.com'.

 

image.png

 

  1. Below are the results when accessing a gambling site which is blocked by default in the FortiGuard settings:

image.png

Contributors