Block Invalid URLs for HTTPS

[#1]

Hi All, I had an application that wasn' t working for me as we had the Block Invalid URLs checked for HTTPS. I unchecked it and it worked afterwards. My question is whether anyone knows of a way to keep the box checked, but exclude specific URL' s from the check? I had the root domain added under the URL filter and exempted it, but it still didn' t work. We are running v 4.0 MR1 patch3 Thanks in advance!!!

[abelio]

Hi, is possible the your unit does not support SSL content scanning and inspection; so, one approach could be define a local category, put that url in that local category, edit your protection profile and check that local category; it will be priorized over fortiguard checking. Another approach could be by just defining that domain as FQDN, define a new firewall policy with that destination, apply a profile with no-invalid URL check and putting that policy above other with similar destination address. hope it helps.

[#3]

From my experience, invalid URLs seems to be forced regardless of exclusions when selected (not sure if by rule or bug). The only way to allow this would be to create a different profile for the specific invalid URL destinations like abelio stated.