Technical Tip: FortiGate Traffic based webfilter quota configuration

[anil_nayak_FTNT]

Description

This article provides the commands for FortiGate traffic-based based webfilter quota configuration.

Scope

FortiGate.

Solution

Traffic-based quota configuration in FortiGate webfilter is available via CLI mode only.

Configure the traffic type webfilter quota as per the following command:

config webfilter profile
    edit <webfilter-profile-name>
        config ftgd-wf
            config quota
                edit 0
                    set type traffic
                    set unit <select unit>
                    set value <select value>
                    set category <select>
            end
        end
end

The following command can be used to obtain the webfilter category information/ID:

get webfilter categories

Once configured, this can be seen in the GUI under Security profile -> Webfilter -> Profile -> Quota section.

From version 6.4.0, Traffic-Based quota configuration in FortiGate webfilter is also available via the GUI.

To configure a quota in the GUI:

1. Go to Security Profiles -> Web Filter, select 'Create New', or edit an existing profile.
2. For the Feature set, select Proxy-based.
3. In the FortiGuard category-based filter section, under General Interest -> Personal, select Education, then select 'Monitor'.

       

4. In the Category Usage Quota section, select 'Create New'.
5. In the Category field, select Education.
6. For the Quota Type, select Time and set the Total quota to 5 minutes.

7. Select 'OK'.
8. Configure the other settings as needed.
9. Select 'OK'.

Related article:

Technical Tip: How to reset web filter FortiGuard quota