Forticlient 7.0.1 build 0103 managed by EMS -- Webfilterquestion

[menatwork]

Hi folks,

we are very new to using Forticlient for our off-net devices. I configured all properly I think. Built a on-net profile and a offnet-profile, which is triggered correctly.

I checked whether the forticlient is blocking sites which have to be blocked like it was set up in the profile. In first instance, it did well.

Today I figured out, that SSL sites are not blocked by the forticlient.

Is the forticlient-webfilter (for https) only working if I enable the forticlient-browser-add-on?

If so, this means every user can disable the forticlient-browser-add-on and the webfilter stops working for https?

This would be cruel!

Hope I am wrong?

Thanks!

[Anthony_E]

Hello menatwork,

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Regards,

[Anthony_E]

Hello menatwork,

While I am looking for a solution, could you please check if you find the answer in this documentation?

https://docs.fortinet.com/document/forticlient/7.0.1/ems-administration-guide/24450/introduction

Do not hesitate to come back to me and indicate me if it helped or not.

Regards,

[menatwork]

Hello,

thanks for your reply. Meanwhile I tested a lot of things and (I think) I found a solution. The Forticlient Webfilter only works as expected, when I enable the browser add-ons (Forticlient). If you dont enable the add-ons, it seems like that no HTTPS website is correctly rated / blocked (if you set up to block it).

I interpreted the manual in that way, that the browser-add-on is a "nice to have" and improves the detection of the forticlient, but in fact, the forticlient webfilter only works as expected, if you activate the add-ons.

If I am not right, it would be kind, to point me in the right direction ;)