Technical Tip: How to allow a website with an Unrated Category

[raureada]

Description	This article describes how to allow the website with an Unrated Category.
Scope	FortiGate.
Solution	When accessing the site, the below error is received: Upon checking on the DNS Query logs, the Action was set to redirect: Check the DNS servers and it was UP: Upon checking on the lookup: It was resolved on this address 208.91.112.55, which is the FortiGuard 'Redirect Portal' IP address used by DNS filtering.  This happens when the website belongs to a Category in the DNS filter's 'FortiGuard Category Based Filter' and the category is set to action as 'Redirect to Block Portal'. To fix this, a DNS 'Static Domain Filter' needs to be enabled, and an entry needs to be added to the override category based filter to allow the website: Now the website is accessible: Static URL filtering can also be utilized to allow an UNRATED category website. For that, open the web filtering profile that is being used in the firewall policy and create a new static URL filter with the action set as EXEMPT. Note: Using the EXEMPT action will bypass all filter checks without any further scanning. Refer to this article on how to create a static URL filter: Technical Tip: Using a static URL filter feature to allow/block web sites Related articles: Technical Tip: Using a static URL filter feature to allow/block web sites  Technical Tip: Difference between action 'Allow' and 'Exempt' in static URL filter  Technical Tip: Using a static URL filter feature to allow/block web sites  Related Video: