Static-Web-Filtering

[daniyal]

Dear All,

We have a fortigate firewall and its fortiguard subscription expired. Now, we are using Static Web-filtering for blocking the specific URL, It includes only one URL, But the static URL-Blocking is not working.

The scenario is that customer wants to Block the URL's subdomain, from internet to the internal web-servers , not the whole URL like he wants to allow facebook.com, But needs to block facebook.com/chat/discussion (Something like that). 

Now, the issue is that that specific static url is still accessible through internet.

[Yurisk]

As you noticed Fortiguard subscription is not needed for static URL filtering.  Now , this sentence is a bit confusing: 

daniyal@77 wrote:

 from internet to the internal web-servers 

As if you are trying to use URL filtering for INCOMING from the Internet to internal web servers connections? If so, it is not the intended use of URL filtering.

[daniyal]

Hi Yursik,

Yes you are right we are trying to block access from Internet to the URL hosted on the internal web-servers. as you mentioned we can't do it through URL-filtering, so how can i implement that. please find below details:

we need to block this path: https://www.xyz.com.sa/payments/

without disrupting traffic on this one: www.xyz.com

[ShawnZA]

You need a FortiWeb device for that

https://www.fortinet.com/products/web-application-firewall/fortiweb.html

[Yurisk]

I didn't say it would NOT work, just that it is not intended use so surprises are possible. But if you want to try, the URL filter should look like that (see pic attached), in a lab setup it works, but be aware if trying on a production system if it blocks ALL access to the website.