Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Palamar
New Contributor

fortigate 80c don't work web filter

fortigate 80c don't work web filter.Help me please 

 

[link]https://www.youtube.com/watch?v=KdBZX4HKOtE[/link]

1 Solution
Dave_Hall
Honored Contributor

Hi Dima.

 

We need more information about this problem, including which firmware the 80CM is running on and perhaps a screenshot of your firewall policy list, showing the rules for your web traffic, when the problem started, does problem affect all computers, does problem happen in all web browsers (IE, Firefox, Chrome, etc.).

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

View solution in original post

14 REPLIES 14
Palamar
New Contributor

Only https traffic is blocked and not blocked http.Why?

Dave_Hall
Honored Contributor

Hi Dima.

 

We need more information about this problem, including which firmware the 80CM is running on and perhaps a screenshot of your firewall policy list, showing the rules for your web traffic, when the problem started, does problem affect all computers, does problem happen in all web browsers (IE, Firefox, Chrome, etc.).

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

Palamar

Firmware Versionv5.2.4,build688

 

The problem in all browsers and on all computers.

 

Palamar

The problem started after a firmware upgrade

Palamar

what other information you provide?

Allwyn_Mascarenhas

You should try asking all your questions at once and provide all the info.

 

You aware of how the policies work? The more specific policies should be on the top as fgt reads and applies them top to bottom.

Palamar

I moved my profile on the top in policies and apply the Web filtr.Filter not working.

Allwyn_Mascarenhas

what exactly happens? The blocked sites are simply opening or you get some other error?

 

Check these steps:

 

Check device licensing in the license widget on the dashboard

Use certificate inspection for https sites, enable ssl inspection in the policies and install the certificate on the PCs

Block google's quic protocol so that all google sites use TLS and then back to previous step

 

 

 

 

Palamar

Please watch the video. I do not understand what's going on

[link]https://www.youtube.com/watch?v=WBVw63Y9K6U[/link]