Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
dilekc
New Contributor

Fortigate 100F webfilter

Hi,

 

On the Fortigate 100F I've created a Web filter to block www.facebook.com

Security Profiles - Web Filter - Static URL Filter

www.facebook.com (Simple - Block - Enable)

But our company has a subpage on facebook like www.facebook.com/companyname

How can I configure Fortigate - Webfilter to block www.facebook.com but allow the users to see www.facebook.com/companyname

 

Thanks for your support.

2 REPLIES 2
ezhupa
Staff
Staff

Hello dilekc,

You might be able to achieve it with static URL filtering. 
1st rule -> Exempt www.facebook.com/companyname 
2nd rule -> Block <whatever you want to block> 

In your case you are trying to allow a specific path after the main link www.facebook.com  so the policy would need to be in proxy mode and deep inspection would need to be enabled.

The exempt rule I would suggest in format "Regex" and you can test regex formats using the below regex tester:
https://regex101.com/

ozkanaltas
Valued Contributor II

Hello @dilekc ,

 

If you use ssl-deep inspection or proxy mode you can achieve this request with a static URL filter. For example like this,

 

image.png

 

But Facebook uses a lot of URLs, so you need to allow these URLs also. 

If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors