Hi Guys,
Trying to build out the fortigate filtering using regular expressions and I can't seem to make them do what I want.
We have an implicit deny policy in place so need to allow access to the CRL for microsoft, go daddy etc.
I have setup a policy as below:
config webfilter profile
edit "Certificate_Revocation_Check"
config override
set ovrd-user-group ""
end
config web
set urlfilter-table 10
end
config ftgd-wf
config filters
edit 1
set category 140
next
edit 2
set category 141
next
end
end
set log-all-url enable
next
end
However, All I see are "passthrough".
Please can you offer some assistance?
Hi mramon79
Can you clarify this? The quoted text from Fortinet support indicate wildcard but you are indicating regular expression -- the two types (along with simple) are still offered choices when setting up a url filter in 5.2.
Edit: mind you -- removing wildcard type wouldn't be so bad -- you can still use regular expression to craft a "wildcard" url filter if needed.
NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1064 | |
889 | |
527 | |
441 | |
152 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.