Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Palamar
New Contributor

fortigate 80c don't work web filter

fortigate 80c don't work web filter.Help me please 

 

[link]https://www.youtube.com/watch?v=KdBZX4HKOtE[/link]

1 Solution
Dave_Hall
Honored Contributor

Hi Dima.

 

We need more information about this problem, including which firmware the 80CM is running on and perhaps a screenshot of your firewall policy list, showing the rules for your web traffic, when the problem started, does problem affect all computers, does problem happen in all web browsers (IE, Firefox, Chrome, etc.).

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

View solution in original post

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
14 REPLIES 14
Allwyn_Mascarenhas

You are getting the exception errors because you have not imported the certificate. See this on importing the certificate:

 

http://cookbook.fortinet.com/preventing-certificate-warnings/

 

And you and use the categories to block all websites and then allow or overide the ones you need.

 

Also use urlfilter correctly as mentioned here:

 

http://docs-legacy.fortinet.com/fgt/handbook/cli_html/index.html#page/FortiOS%205.0%20CLI/config_web...

 

it says:

To block all pages with a URL that ends with example.com, add example.com to the block list. For example, adding example.com blocks access to www.example.com, mail.example.com, www.finance.example.com, and so on. Use this command to exempt or block all URLs matching patterns created using text and regular expressions (or wildcard characters). For example, example.* matches example.com, example.org, example.net and so on. The FortiGate unit exempts or blocks Web pages that match any configured pattern and displays a replacement message instead.
Palamar

http to need a certificate? It does not block sites that run on http.

what should I do?

 

Palamar

thanks for the help.

I put a checkbox(tick) Inspect All Ports in ssl inspection and it worked.

Sorry for my English, I write through an interpreter

 

 

Allwyn_Mascarenhas

great.

So all the blocking problems are solved now?

 

Palamar

Yes,thanks for help.

Labels
Top Kudoed Authors