Description
This article describes how to fix if the web rating override on a Web Filter profile is broken with the configured action after an upgrade to v7.2.11, v7.4.6, v7.4.7, v7.6.1, and v7.6.2.
Scope
FortiGate v7.2.11, v7.4.6, v7.4.7, v7.6.1, v7.6.2.
Solution
Custom Category:
Web Filter Profile:
Firewall Policy:
When accessing the website (doh.dns.apple.com), the FortiGuard Block Page is encountered. The website category should be 'Allowed_Custom'.
Workaround:
Configure a dummy Custom Category and Web Rating Override/Local Rating. Copy and paste the command below on the CLI.
It will still work after it is deleted. Alternatively, delete and re-add one of the existing web rating categories and ratings. If the FortiGate was rebooted, apply the workaround again.
config webfilter ftgd-local-cat
edit "dummy-cat"
set id 190
next
end
config webfilter ftgd-local-rating
edit "dummy.local"
set rating 190
next
end
config webfilter ftgd-local-rating
delete "dummy.local"
end
config webfilter ftgd-local-cat
delete "dummy-cat"
end
The website is accessible:
It has been confirmed that this issue will be resolved in v7.6.3 and v7.4.8.
