Allowing only certain URL' s

[#1]

I need to block all web access for certain users EXCEPT for certain job related URL' s (i.e. weather.com) The users are allowed full access during certain times of the day (breaks, lunch, etc.) I was successful in configuring multiple policies to achieve this, but am looking to allow specific URL' s while blocking everything else. Can this be done with FortiOS and how? Thanks for any assistance.

[UkWizard]

you need to use a regex to block everything (its either * or . if i remember offhand) then explcitly whitelist the ones you want to allow.

[rwpatterson]

Put the regex .* last. This will block everything! Make your valid allowances above this one.

[UkWizard]

a single " ." dot should do the same, doesn' t it?

[rwpatterson]

The dot means any character once. The star means the prior expression zero or any amount of occurances.

[UkWizard]

The dot means any character once. The star means the prior expression zero or any amount of occurances.

Bob - Looks like fortinet disagree with us, accidentally stumbled on this KC document; http://kc.forticare.com/default.asp?id=796&Lang=1&SID= It says we should us ^.* to block all

[rwpatterson]

The carat signifies that the expression starts at the left, I believe.... So starting with anything, match everything....

[#8]

Maybe this is not for this forum, BUT... do I use Firewall policies here or just web filtering?

[rwpatterson]

The web filtering takes place in a protection profile that is placed into a policy...so yes.

[UkWizard]

Just make sure you use " allow" and not " exempt" for the allowed list, as the latter would not perform any AV or IPS scanning.