URL Filter for incomming HTTPS Requests to Exchange

[Donnervogel515]

Hello, I am completely new to the Fortigate world and I need your help please. We have an Exchange Server directly behind the Fortigate 40D and only want to allow access to ActiveSysnc. 

  With the earlier Watchguard, I had appropriate URL filters:

1. Allow https://server.domain.com/Microsoft-Server-ActiveSync/*

2. Deny all

How are you doing at Fortigate?

Help Please

           

[akushwaha]

Hi,

As I understand you want to allow https://server.domain.com/Microsoft-Server-ActiveSync/* this URL and block all, you can do this by configuring Web Filter on firewall.

++ Create a webfilter profile(Security Profile >>> Web Filter >>> Create New) and Go to "FortiGuard Category Based Filter" select all category and Choose block option.
++ To allow a particular Domain you can create Stati URL in the same Web Filter Profile, please refer to the below link :
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-a-static-URL-filter-feature-to-allow...
++ Then you can add this web filter profile to the Firewall Policy.

Best Regards, 

Abhimanyu