Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Mirza_Asad2723
New Contributor II

The 'malicious website' category is 'blocked' but still opening

Dear Concern,

 

There is a website that I checked in 'Web Rating Override', and its category is 'malicious website'.  opening. Why?Capture.JPG

I have blocked the 'malicious website' category in the 'DNS Filter' and 'FortiGuard Category Based Filter'. Yet, the website is still opening. Why?

 

Capture02.JPG

 

How can I troubleshoot or check.

3 REPLIES 3
hgarara
Staff
Staff

Hello @Mirza_Asad2723,

 

Can you please share the firmware version of fortigate and how is the policy being set up?

 

Thank you,

Hemil

dbhavsar
Staff
Staff

Hello @Mirza_Asad2723 ,

 

- you can use the cert-inspection in the policy and try switching between proxy/flow-based mode of the policy. Make sure you clear cache before testing and after making changes on FortiGate.

 

DNB
dkochhar
Staff
Staff

Hello @Mirza_Asad2723 

Can you please check which policy does the traffic goes from ? Please check it in forward logs by specifying source IP from where you are testing this website.
and please make sure you have DNS profile attached to it.

Dixit Kochhar
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors