The 'malicious website' category is 'blocked' but still opening

[Mirza_Asad2723]

Dear Concern,

There is a website that I checked in 'Web Rating Override', and its category is 'malicious website'.  opening. Why?

 

I have blocked the 'malicious website' category in the 'DNS Filter' and 'FortiGuard Category Based Filter'. Yet, the website is still opening. Why?

How can I troubleshoot or check.

[hgarara]

Hello @Mirza_Asad2723,

Can you please share the firmware version of fortigate and how is the policy being set up?

Thank you,

Hemil

[dbhavsar]

Hello @Mirza_Asad2723 ,

- you can use the cert-inspection in the policy and try switching between proxy/flow-based mode of the policy. Make sure you clear cache before testing and after making changes on FortiGate.

[dkochhar]

Hello @Mirza_Asad2723 

Can you please check which policy does the traffic goes from ? Please check it in forward logs by specifying source IP from where you are testing this website.
and please make sure you have DNS profile attached to it.