How to create web exceptions

[Kubajs]

Hello,
I primarily use policy-based mode because I find it easier to understand, however, for the sake of more support I am trying to convert policies to Profile based mode and I have a question. How do I get the web filter to have the social media category enabled while blocking social media like tiktok, wechat... In policy-based mode it was enough to make a deny rule on these apps and under it create a rule where I allow social networks, but I have no idea how to do the same in profile-based mode in FortiManager.

Thank you in advance for your advice

[jasonhong]

When creating a new policy, the Security Profile section will appear once the Action is set to "Accept" as per below screenshot.

There, you will be able to set the necessary web filter profile for the policy.

[Kubajs]

Hello @jasonhong ,

Thanks for response, but I think you did not understand my question completely. I know that I can use Web filter. I want to know how I should block 2 social media web sites and rest allow.

[jasonhong]

You may use the URL filter option under the webfilter profile.

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/615462/url-filter

[wagersantonio]

To create web exceptions in profile-based mode in FortiManager, you need to create a web filter profile that allows the social media category but then add specific web filter overrides to block certain apps like TikTok and WeChat. First, go to the Security Profiles section and create or edit a web filter profile. Enable the social media category under this profile. Then, add individual filter overrides for the specific apps you want to block by listing them under the "URL Filter" or "Application Control" settings within the same profile. This will block the specified apps while still allowing access to other social media platforms.