Created on 08-14-2019 07:10 AM Edited on 11-23-2021 12:20 AM By Anthony_E
Description
This article explains how to use Web-filter to create a white list of HTTP(S) resource, and block rest of the sites.
Solution
Normal behavior would be to have some entries with allowed status and one wildcard ‘*’ with block.
For some internet resources, such wildcard will broke TLS/SSL handshake. It is much better to use regexp in form ‘[^.]’ .
Please have a look at sample profile:
#config webfilter urlfilter
edit 1
set name "default"
config entries
edit 1
set url "sample.com"
set action allow
next
edit 2
set url "[^.]"
set type regex
set action block
next
end
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.