Block HTTPS sites by URL

[sazi]

[using FortiGate 100D v5.02] I setup the WebFilter to block some categories, like Social Networking. If a user tries to access using HTTP it works fine, blocking the access. But if the user tries using HTTPS, the access is allowed. I read about the necessity to use SSL Inspection, but if I activate it, i get some errors about certificate. Then, I found this option inside UTM >> WebFilter: What does this option ? With this, I could block URLs access without using HTTPS Inspection ?? In my site, is not necessary Inspection under SSL Content, I just would like to block the access to websites via HTTPS...

[SimplicityForce]

I have been trying out the DNS Inspection Mode for a similar situation, and it seems to be working pretty well. You may want to give this a try. The only caveat is that you need to use the FortiGuard DNS servers, which may not be as fast or reliable as your current servers. I use the FortiGuard servers as forwarders for internal DNS with no issues yet. I hope this is helpful.

[sazi]

I' m already using FortiGuard DNS. I found this documentation, but I' m not sure if is it what you said. http://docs.fortinet.com/fos50hlp/50/index.html#page/FortiOS%205.0%20Handbook/UTM.005.12.html Best regards.

[SimplicityForce]

You activate DNS inspection under UTM >> WebFilter >> Profile Inspection Mode: DNS

[okidoki99]

Hi there, I also have issues with blocking https sites. web filtering for youtube and facebook is ok, but as soon as I enter https:// it will pass my filters. My device is an: Fortigate 111C v5.0,build0179 (GA Patch 2) Can someone give me a check list of what do I need to have configured so it works?

[okidoki99]

I did not figure out how to add more pictures so I will reply with 2 more...sorry for that

[okidoki99]

last one

[Staplewire]

I' ve been working on this problem also. This setup seems to work for me for facebook, youtube and twitter (http and https):

[Staplewire]

For youtube, you can still access the page in https but the movies won' t play.

[okidoki99]

facebook and youtube seems to work (i can access the page but have error on play for every movie) is there any way to get rid of that page with the certificate being expired, even on google page?