- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
DNS v Web Filter v ISDB
My aim is mainly blocking bad sites (malware, C2, phishing) not controlling certain types.
Web filter and DNS make sense, though perhaps are a tad similar.
ISDB seems to offer some IP blockers. Would ISDB cover my wish by blocking connections pre/post malware to malicous domains (IP behind)?
Thank you
Solved! Go to Solution.
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The smallest relevant package is "Web Security", and that includes both webfilter and DNS filter.
https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/og-fortiguard.pdf
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Web filter is for Web navigation, you can control which Web categories you can access or you want to deny.
ISDB IP reputation is not for Web navigation, it is for Tor, Proxy, C&C, bad bots and so.
So they don't have the same goal.
Besides, I think DNS is the old fashion. I think it is not as efficient as Web filter.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Do you think ISDB would safely do my ask of blocking drive by downloads, phishing, c2...please?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
According to Fortinet it should.
I used it and it seems working.
I hope one of the Fortinet team can confirm if the IP reputation DB is updated efficiently.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I got a bunch of 30 day trials but oddly does not inc. firmware updates nor IPDB.
Buying Forticare alone is not much money.
Thank you
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @graemeb ,
If you have UTM licenses, I would recommend you use Web Filter + Application Control.
Jerry
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
No, I am a glorified home user so think it's a bit ott for me. Just after malicous ip/site blocking.
Thank you
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@dingjerry_FTNTis it possible to buy just dns or web filter alone not under a pack?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I will ask a reseller thanks