Is there no way to bulk add URLs to the URL Filter?

[shelzmike]

We have recently adopted a block all/allow only whitelsted url policy for one department and yes it works great and yes it has been a pain (with all the linked stylesheets, certificate sites, etc.); however, we are getting it done. The biggest pain is the process by which you have to manually add each URL individually and this seems very low tech at best. Is there not a way (via CLI or other) that will allow me to upload a bulk list? If not, this is pretty sorry and I would expect Fortinet to allow this as a standard feature. Thanks. Mike

[pchechani_FTNT]

I have fortigate 80CM, and attaching a picture from where you can do bulk upload of cli commands if you have it in txt file: navigate till System->Config->Advanced. Very first option or depend on the FGT, there is option for Upload Bulk CLI command File. See attched PIC

[rwpatterson]

Additionally, if you have the command(s) formatted, you could paste them into a CLI window.

[shelzmike]

Thanks for the link to the bulk command file upload. I knew I probably had to do it that way, but couldn' t figure out how to paste into the CLI (it wouldn' t let me and I figured I could do it via the console port, but cannot find the cable). I already did it manually, but next time I will keep this in mind. On another note, will the URL filters cascade. Say for instance, I have a flitered group that I only want to be able to access A,B,C, & D sites. I use a Whitlist blocking method to block all but those 4 (which i have setup now and it works). Say though I have managers who actually need access to A & B, but not C & D. Can I have a policy that blocks out all but the 4 and then have a policy that actually allows managers access to A & B explicitly but put it before the blocking policy in the firewall, will that work? Thanks! Mike

[rwpatterson]

ORIGINAL: shelzmike Thanks for the link to the bulk command file upload. I knew I probably had to do it that way, but couldn' t figure out how to paste into the CLI (it wouldn' t let me and I figured I could do it via the console port, but cannot find the cable).

In the CLI, <CTRL> V (paste)

[shelzmike]

I tried that but for some reason, it did not work. Maybe it had to do with the browser I was using. I dunno. Thanks again though. Mike

[rwpatterson]

Make sure nothing has been highlighted with the mouse (no white blocks of text marked). Then it should go fine.

[Rick_H]

You can also SSH/telnet into your FGT if those protocols are enabled. Then you can use the TTY software of your choice (PuTTY works well for me) and paste however you want! Cheers, Rick

[sean_powell]

this relates to my adblock question that i' ve posted... in the bulk upload CLI is this the correct format for the text file?

 config webfilter urlfilter
     edit 1
             config entries
                 edit " *.xxx" 
                     set action block
                     set type wildcard
                 next
 end
 set name " blocked sites" 
 next
 end
 

and I can fill in the sites I want to block adding an entry for each... is that correct?