FortiManager - CLI Webfilter Profile acting weird

[Florian12]

Hello everyone,

I am currently trying to change a webfilter profile on a FortiGate via the FortiManager so it allows access to alcohol and tobacco websites.

Adjusting the settings works without any problems.

Once I install the device settings / policy package on the FortiGate, using the install wizard, however, it just resets the webfilter profile and sets the categories alcohol and tobacco to "block" instead of "monitor" again.

What can be the cause of this? Is there any other way to do this?

FortiManager v7.0.5 GA build0365

FortiGate 7.0.7 GA build0367

Thanks!

[gfleming]

Does your policy package show as syncrhoized between FGT and FMG?

When you go to install it, what does the install preview show? Do you see the config as it should be?

After install are any errors produced on the FMG?

[Florian12]

Hi Graham,

thanks for your answer!

The policy package shows as synchronized.

If I try to install the package without any changes, it simply tells me that everything is already synchronized.

If I do it after adjusting the corresponding webfilter profile it lets me install it and says in the preparation "Total 2/2, Success: 2" (two webfilter profiles). The installation goes through and says that the policy package has been installed successfully. Status below then says "Total 1/2, Success: 1". No errors.

Florian

[gfleming]

What does the install preview show you?

[Florian12 · Accepted solution]

I managed to fix it.

I tried changing the webfilter via the "Device Manager" category under the CLI category.

However, it kept getting overwritten as the global webfilter profile (under "Policy & Objects" -> "Object Configurations") said so.

After changing the global webfilter profile and reinstalling the policy, the issue was resolved.

Thanks for your help!