FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
xiaoj
Staff
Staff
Article Id 278021
Description This article describes how to allow a website from a blocked FortiGuard Category.
Scope FortiGate.
Solution

The category 'Alcohol' is set to 'Block': beerforbusiness.ca is allowed to access.

 

1.png

 

Overriding the website to a local custom category can be used to allow the website from a blocked category. For instance, beerforbusiness.ca can be overridden to a local custom category 'Allowed Websites'.

 

2.png

 

The action of the local custom category is set to 'Allow'.

 

3.png

 

The websites categorized under 'Alcohol' category are still blocked except for beerforbusiness.ca.

4.png

 

5.png

 

The web rating override to an allowed pre-defined FortiGuard category does not work for allowing the website from a blocked FortiGuard category. The website is still blocked by its original category.

 

For instance, beerforbusiness.ca is overridden to 'News and Media', which is set to 'Allow'. 

 

Picture6.png

 

Picture7.png

 

The block page will be shown when accessing beerforbusiness.ca, as the 'Alcohol' category is blocked.

 

Picture8.png

 

For the override of a pre-defined FortiGuard category to work, switch the action for the category from 'Allow' to 'Monitor'. Refer to Troubleshooting Tip: Web Rating Override not working for more details.

 

Configuring a static URL Filter to allow the website from a blocked category does not work for allowing the website. The website is still blocked by its original category as the web filter will pass the traffic to FortiGuard category checking after the URL Filter check.

 

Picture9.png

 

Picture10.png

 

To allow the website to use the URL Filter, switch the action from 'Allow' to 'Exempt'. Note that setting the action to 'Exempt' will bypass further inspections such as FortiGuard category-based filters, content filters, advanced filters, and Antivirus scanning.

 

Refer to Technical Tip: Difference between action 'Allow' and 'Exempt' in static URL filter for more information regarding the 'Exempt' action.