Description
This article describes how to customize distinct replacement message for static and FortiGuard Category Based URLs.
Scope
FortiGate.
Solution
- Configure a replacement message group and set the group type to 'security'. When the group type is defined as 'authentication', it can be used in policies but not in web filter profiles.
Note that the 'auth' group type does not include a URL block page replacement message. Customize the replacement message to appear on the block page for users.
config system replacemsg-group
edit "Block-security"
set comment ''
set group-type utm
next
end
- The following example demonstrates 'www.example.com' configured in the static URL and blocked while the other settings within the FortiGuard Category-Based filter remain unchanged.
config webfilter profile
edit "web-filter"
set replacemsg-group "Block-security"
config web
set urlfilter-table 1
end
config ftgd-wf
unset options
config filters
-------
next
end
- Use the web-filter profile configured into the security policy.
- Below are the results when attempting to access the static URL 'www.example.com'.
- Below are the results when accessing a gambling site which is blocked by default in the FortiGuard settings: