Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
graemeb
New Contributor II

DNS v Web Filter v ISDB

My aim is mainly blocking bad sites (malware, C2, phishing) not controlling certain types.

 

Web filter and DNS make sense, though perhaps are a tad similar.

 

ISDB seems to offer some IP blockers. Would ISDB cover my wish by blocking connections pre/post malware to malicous domains (IP behind)?

 

Thank you

1 Solution
pminarik

The smallest relevant package is "Web Security", and that includes both webfilter and DNS filter.

 

https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/og-fortiguard.pdf

[ corrections always welcome ]

View solution in original post

10 REPLIES 10
AEK
SuperUser
SuperUser

Web filter is for Web navigation, you can control which Web categories you can access or you want to deny.

ISDB IP reputation is not for Web navigation, it is for Tor, Proxy, C&C, bad bots and so.

So they don't have the same goal.

Besides, I think DNS is the old fashion. I think it is not as efficient as Web filter.

AEK
AEK
graemeb
New Contributor II

Do you think ISDB would safely do my ask of blocking drive by downloads, phishing, c2...please?

AEK

According to Fortinet it should.

I used it and it seems working.

I hope one of the Fortinet team can confirm if the IP reputation DB is updated efficiently.

AEK
AEK
graemeb
New Contributor II

I got a bunch of 30 day trials but oddly does not inc. firmware updates nor IPDB.

Buying Forticare alone is not much money.

Thank you

dingjerry_FTNT

Hi @graemeb ,

 

If you have UTM licenses, I would recommend you use Web Filter + Application Control.

Regards,

Jerry
graemeb

No, I am a glorified home user so think it's a bit ott for me. Just after malicous ip/site blocking.

Thank you

graemeb
New Contributor II

@dingjerry_FTNTis it possible to buy just dns or web filter alone not under a pack?

dingjerry_FTNT

Hi @graemeb ,

 

Sorry, this is a sales question, I have no idea.

Regards,

Jerry
graemeb

I will ask a reseller thanks

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors