Created on
08-14-2019
07:10 AM
Edited on
11-23-2021
12:20 AM
By
Anthony_E
Description
This article explains how to use Web-filter to create a white list of HTTP(S) resource, and block rest of the sites.
Solution
Normal behavior would be to have some entries with allowed status and one wildcard ‘*’ with block.
For some internet resources, such wildcard will broke TLS/SSL handshake. It is much better to use regexp in form ‘[^.]’ .
Please have a look at sample profile:
#config webfilter urlfilter
edit 1
set name "default"
config entries
edit 1
set url "sample.com"
set action allow
next
edit 2
set url "[^.]"
set type regex
set action block
next
end
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.