URL filter regexp

figge · ‎01-23-2019

Have the way the Fortigate interprets regular expressions changed between FortiOS release 5.4 an 5.6 ??? \.ru\b worked in 5.4 to match all domains under the top-domain .ru, it does not work in 5.6.4 if I add \.ru\b in the Static URL filter via GUI the regexp as show in the CLI is \\.ru\\b and it does not match

baggins · ‎01-25-2019

right..

Just checked with wildcard option and *.ru/ and it works.

I'm on 6.0.3..

Site that you mentioned works "www.rum.se" and went trough list here on few and all blocked.

try..

View solution in original post

figge · ‎01-28-2019

As I wrote earlier:

I have two fortigate, one running 5.4.8 and one running 5.6.4. In the first one (FortiOS 5.4.8) regexp works as intended. In the second one (FortiOS 5.6.4) regexp does not match

The interesting thing is that the same regexp gives a different results in the two units

even though it is applied in identical policys.

baggins · ‎01-28-2019

yap...

I guess they "upgraded" the syntax.. :)

Let me know if you get anything from the TAC

figge · ‎01-29-2019

Apparently there is a bug in parsing certain regexps, learned about this in the response to my TAC-case.