FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
serge_FTNT
Staff
Staff

Description
This article explains that with FG6000-F v6.0, when Web-Filter warning page is implemented for a URL category, users may need to hit multiple times the 'Proceed' button to reach the URL category set with a ‘Warning’ replacement page.

Scope
FG6000-F

Solution
Modifying FG6000-F load balancing setting as below, may resolve the issue.

#config load-balance setting
set dp-load-distribution-method src-ip (or ‘src-dst-ip’)
end

Caution: Before changing load-balance setting to ‘src-ip’, consider if a Proxy server or NAT is performed between users and FG6K-F.
In that case, users traffic may hit more FPC’s than others and may not be well balanced. Same remark for ‘src-dst-ip’.


(default value is ‘src-dst-ip-sport-dport’)

Warning Prompt:

     
Contributors