Technical Tip: How to allow chat.openai.com from F...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 320426

Description

This article describes how to allow chat.openai.com when FortiGate is configured as an explicit proxy and has a web filter profile.

Scope

FortiGate v6.4.x +.

Solution

chat.openai.com is redirected to chatgpt.com.
On checking the web filter category, chat.openai.com and chatgpt.com belong to the artificial intelligence technology category:

However, just by allowing the artificial intelligence technology category, a blank page appears instead of a ChatGPT chat screen.
After inspecting the page, URLs are getting redirected to cdn.oaistatic.com.

Other URL.PNG

As it is an explicit proxy and proxy-based inspection, it is necessary to manually allow all embedded URLs or allow the content server category:

ChatGPT works:

170

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to allow chat.openai.com from FortiGate using explicit proxy and a web filter profile