Technical Tip: How to allow certain users in a blocked URL Filter Category

pgautam · ‎07-12-2023

Description

This article describes how to allow certain users in a blocked URL Filter Category.

Scope

FortiGate, FortiOS, Webfilter.

Solution

For example, it is wanted to allow 'News and Media' access for one user group while it is blocked for other users.

Step 1: Create a user group to allow the 'News and Media' access.

user group.PNG

Step 2: Create a Web Filter Profile and in the block category select Authenticate.

Step 3: Add the defined user group in Step 1 and select 'OK'.

added user.PNG

Step 4: In the block category, it will show the authenticate icon.

Step 5: Configure the created web filter profile in the forward policy.

Result:

Open the test PC and try to access any news website.
When opening the news sites it will show the block page.
Select Proceed to see the user authentication page and add the user name and the password.
Once the user is authenticated it will be possible to access the news website.

Note: In order that this feature properly, create a web filter in proxy-set with proxy-based firewall policy along with certificate inspection.

Related document:
FortiGuard filter