Description
This article describes how a FortiGuard rating unavailable message appears when a rating lookup is performed on FortiGate Web Rating Overrides.
Scope
FortiGate.
Solution
Make sure that the 'FortiGuard Filtering Services' are active and available (Green Arrows) under System -> FortiGuard.
If the 'Filtering Services' are active, it is expected that FortiGate will return the message 'FortiGuard rating unavailable' when IPs and website hostnames are not rated by the FortiGuard servers.
If the IP/website is not rated on FortiGuard servers (Not Rated) as shown in the image below, then FortiGate will not be able to rate it as well. FortiGate can rate only those IPs and website hostnames that are already categorized on the FortiGuard servers.
In order to check the category of IP/website, use Web Filter Lookup.
In order to check the category of IP/website, use Web Filter Lookup.
To have the IP/website categorized, submit a review request to the FortiGuard web filter team: Web Filter Classification Rating Request.
Meanwhile, as a workaround in FortiGate, use the option 'Web Rating Override' and override the IP or the website to another category to allow traffic to it.
If a URL is unrated, it means that it has not been categorized by the FortiGuard servers. In such cases, FortiGate cannot apply a web filter override because there is no existing category to override. However, it is possible to manually add the URL to a custom category and configure the desired action for that category in the web filter profile. Here are the steps:
- Create a Custom Category:
- Go to Security Profiles -> Web Rating Overrides.
- Select Custom Categories, and then Create New.
- Enter a name for the category and ensure the Status is set to Enable.
- Select OK.
- Create a Web Rating Override:
- Go to Security Profiles -> Web Rating Overrides and select Create New.
- Enter the URL to override.
- For Category, select Custom Categories, and for Sub-Category, select the category previously created.
Related article:
