FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
rahulkaushik-22
Article Id 217888
Description

This article describes how subdomains inherit the same category as the parent domain in Web Rating Override if not defined explicitly.

Scope All FortiOS.
Solution

This is expected behavior.

 

When a domain is defined in the Web Rating Override, then all of its subdomains inherit the same category unless the category explicitly defined in the web rating override entry.

 

Example:

 

Create a web rating override for the domain 'google.com':

 

rahulkaushik22_0-1658159152853.png

Example logs for 'google.com' and its subdomains such as; 'drive.google.com', 'mail.google.com', 'accounts.google.com', and 'play.google.com':

 

rahulkaushik22_1-1658159181067.png

 

rahulkaushik22_2-1658159188449.png

 

rahulkaushik22_3-1658159200106.png

 

A subdomain of the domain can be allowed either by URL filter list in the Web Filter profile, or by explicitly defining the category of the subdomain.

 

The subdomain can be explicitly defined in the web rating override:

 

rahulkaushik22_4-1658159236401.png

 

Log:

 

rahulkaushik22_5-1658159264403.pngrahulkaushik22_6-1658159284371.png

 

Log:

 

rahulkaushik22_7-1658159306348.png

 

In the above log example, the category column is empty because it is allowed by the URL filter of the web filter profile.