Open a Site for a Single User

[mcornelison]

Our School Resource Officer needs access to a site to order security items for our school. This is blocked because it is a site that sells tactical equipment as well as guns. He is literally the only one that needs to get on this site but Fortinet refuses to respond with any help in this. Is there anyway to bypass a blocked site for a single user?

[AEK]

This should help:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-FortiGate-captive-portal-usi...

[Debbie_FTNT]

Hey mcornelison,

The FortiGate has to have some way of identifying the user - a fixed IP, for example, or authentication.

You can then create a policy for that specific IP and/or user and put it at the top of the policy list to allow access to the blocked webfilter categories.

Exempting WITHIN the same policies that also block all other users is a bit tricky, you'd have to set webfilter action to authenticate instead of block, and then everyone would get a login screen instead of a blocked message.

If you'd like more details on either option (policy based on specific user or specific IP) let us know.

Cheers,

Debbie

[bkrishnan]

Hi,
The below article might help you if the traffic is getting blocked because of URL filtering;
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-allow-certain-users-in-a-blocked-UR...

[rahul_p1]

Hi,

You can create a firewall policy with source as user and destination as fqdn for that website. or 

you can allow from web filter static url filter, you can exempt from there.

Please refer to this article to configure this:- https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-a-static-URL-filter-feature-to-allow...