FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Description This article explains the changes made around the Web Filter override starting FortiOS 6.2.5 and 6.4.2.
- For FortiGate 6.2.5 and above.
- For FortiGate 6.4.2 and above.
Solution In the GUI, an Allow action of a local/remote category when editing a web filter profile is effectively a shortcut to disable the local/remote category overrides. The URLs subject to rating overrides will now only take effect if the local category action is set to ‘Monitor’.
For example: In case the site www.google.com is overwritten to 'Business' Category, set action 'Monitor' to the 'Business' Category instead of 'Allow'.
# config webfilter profile edit <web filter profile> config ftgd-wf config filters edit <> set category <custom category> set action monitor next next end next end
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.