FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
rsondal
Staff
Staff
Article Id 375995
Description This article describes how to unblock the website by resolving the error 'unknown content detected and blocked' for HTTPS service.
Scope FortiGate.
Solution
  1. Under forward traffic logs, it should be showing UTM blocked.
    How to understand the UTM block logs unde... - Fortinet Community

  2. Then check security events logs as per the policy (for example, if it is getting blocked by policy 65 then check how many UTMS are on that policy and one by one check all the UTM logs).

  3. Then under the antivirus logs will be able to see the block logs related to the source IP and destination URL (which was getting blocked).

 

image1.JPG

 

image2.JPG

 

  1. Then check the policy from which this website is getting blocked. On that policy, there should be protocol options Starting from FortiOS 7.2.4 versions. Before this version, the option for unknown encoding was included in the antivirus profile only.

    Technical Tip: Usage of 'unknown-content-encoding' option for allowing file downloads in proxy mode

     

    image3.JPG

     

     

  2. On that protocol option edit the custom default profile in CLI (which was in use) because this option is only available in CLI.

     

     

  3. Then bypass the unknown content encoding option under the HTTP service.

     

    image4.JPG

     

     

  4. Then the same log will be bypassed and the site will work fine.

     

    image5.JPG