Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mauog
New Contributor

URL Filtering by regexp problem

Hi all,

I was trying to block a web site using a web filter based on a static URL filter.

I need to block the url exactly like http://www.ws.aaa.it/services2/bbb but allow something different like http://www.ws.aaa.it/services2/bbb?whateverelse

So I built this filter www\.ws\.aaa\.it\/services2\/bbb$ with type regexp.

I read the fortigate uses perl syntax so I tested this url in aperl script and it works fine. Unfortunately it does not work in the fortigate configuration.

 

What am I missing?

 

Thank You

 

Regads

 

 

 

2 REPLIES 2
Dave_Hall
Honored Contributor

URL filters are executed from top-to-bottom -- create two URL entries, place the approved URL above the "block" one, set the action on the approved URL to exempt. Look up the actions in the Handbook to understand what the actions do -- exempt, allow and monitor do similar functions, but (I recall) allow and monitor passes the URL on to be processed by other UTM functions on the fgt.  (Someone correct me on this.)

 

But I think using a wildcard URL maybe what you want; "http://www.ws.aaa.it/services2/bbb?*"

 

[strike]Edit: If the above works you may not need to create a second URL filter rule.[/strike]

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
anachore
New Contributor

Hello,

 

I have a very similar problem. Do you find a solution?

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors