FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Sasha_FTNT
Staff
Staff
Article Id 192394

Description
This article explains how to use Web-filter to create a white list of HTTP(S) resource, and block rest of the sites. 


Solution
Normal behavior would be to have some entries with allowed status and one wildcard ‘*’ with block.
For some internet resources, such wildcard will broke TLS/SSL handshake. It is much better to use regexp in form ‘[^.]’ .


Please have a look at sample profile:

#config webfilter urlfilter
edit 1
set name "default"
config entries
edit 1
set url "sample.com"
set action allow
next
edit 2
set url "[^.]"
set type regex
set action block
next
end
Contributors