Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
cbraafhart
New Contributor

FortiEMS with synced webfilter settings

Dear Forums,

 

i am currently testing and setting up our FortiiEMS within our environment, but i am currently using synchronized profiles from our fortigate. Nothing too difficult. I am currently using it this way due to the missing options of not being able to limit users with quotas on fortiEMS. Fortigate gives you the option to limit users on specific FortiGuard categories.

 

There is one setting i am currently trying to allow traffic but can't seem to find it on my fortigate. i have the Unrated category set to allow and block malicious URL's discovered by FortiSanbox disabled.

 

What i am trying to avoid is, users getting errors on websites that fall under the category Unknown.

What i could understand from people getting the same error they corrected it by editing the XML file and allowing the following line(bolted):

 

<fortiguard> <enabled>1</enabled> <rate_ip_addresses>0</rate_ip_addresses> <use_https_rating_server>0</use_https_rating_server> <use_legacy_fdn>1</use_legacy_fdn> <action_when_unavailable>deny</action_when_unavailable> <restrict_services_to_regions></restrict_services_to_regions> </fortiguard>

 

 

They have switched this to allow.

 

My question is, is there a way to set this to allow on the fortigate and not within the XML file?

 

1 REPLY 1
ozkanaltas
Valued Contributor II

I think you can use "Allow websites when a rating error occurs" option on Fortigate web filter profiles.

 

Because as you said in the XML setting points to this setting. Could you try this option?

 

image.png

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors