URL categories rules

Kubajs · ‎10-23-2023

Hello,
I'd like to ask your advice. I am building policies for my FortiGate and I am creating policies for URL categorization on AD groups (students at school
I want to ask what approach you prefer and what impact it will have on the firewall performance.
1. Disallowing blocked categories (**bleep**, spam, etc) and then only allowing all HTTP and HTTPS
2. Setting allowed categories on given user groups.

Thank you.

xshkurti · ‎10-31-2023

@Kubajs
It doesn't matter. It will not affect performance.
In your case you should consider:
1. Allow http https
2. Allow categories based on AD user groups
3. Block everything else.

View solution in original post

hbac · ‎10-25-2023

Hi @Kubajs,

Web filter allows/denies traffic based on categories. You can create different web filter profiles for different user groups.

Regards,

Kubajs · ‎10-31-2023

Hello @hbac ,

I know that, I just want to know, what is better for FortiGate performance.

Or does it not matter?

Thanks

xshkurti · ‎10-31-2023

@Kubajs
It doesn't matter. It will not affect performance.
In your case you should consider:
1. Allow http https
2. Allow categories based on AD user groups
3. Block everything else.

Kubajs · ‎10-31-2023

Thank you very much. That's what I wanted to know :)