Description
This article describes how to fix if the web rating override on a Web Filter profile is broken with the configured action after an upgrade to v7.2.11/v7.6.1
Scope
FortiGate v7.2.11, FortiGate v7.6.1.
Solution
Custom Category:
Web Filter Profile:
Firewall Policy:
When accessing the website (doh.dns.apple.com), the FortiGuard Block Page is encountered. The website category should be 'Allowed_Custom'.
Workaround:
Configure a dummy Custom Category and Web Rating Override/Local Rating. Copy and paste the command below on the CLI.
It will still work after it is deleted. If the FortiGate was rebooted, apply the workaround again.
config webfilter ftgd-local-cat
edit "dummy-cat"
set id 190
next
end
config webfilter ftgd-local-rating
edit "dummy.local"
set rating 190
next
end
config webfilter ftgd-local-rating
delete "dummy.local"
end
config webfilter ftgd-local-cat
delete "dummy-cat"
end
The website is accessible:
The issue will be fixed on v7.6.3.
