Unblock Facebook and Youtube for selected users

[bobm]

Hi,

I'm running a 90D with FW 5.0.9.  During business hours, our Sales group is blocked from social media, streaming, online shopping, etc. They are all local logon users.  But recently we have been asked to allow one of the reps to monitor a Twitter feed, and a couple of different reps to be able to access some training videos on Youtube.

I cloned the Sales security profile (once for the Twitter group and once for the Youtube group, and within those profiles set web filters with *twitter* and *youtube*/*google* as Wildcard / Exempt status.  Then I inserted Policies for these two new groups in the User ID defined Policies (Above the more restrictive Sales policy). 

The problem is, the Twitter seems to be working OK, but only on Firefox and the Youtube exemption doesn't seem to be working at all.  Any ideas would be greatly appreciated.  For now I just have them all in the "Management" group which has all kinds of things open that we don't want for reps on the floor.

Thanks for the help

[vmartin_FTNT]

Hi bobm,

I would suggest creating a rating override that puts both Twitter and Youtube into a custom category that you can manage separately from the rest of the FortiGuard categories they are in. You can find instructions about how to do this using this Cookbook recipe (the rating override is the first method listed).

Once you've created the custom category, you can allow some users to access sites in that category, while blocking it for others.

You could also give select users the ability to use a web filter override (the second method in the recipe). However, I think the custom categories solution may be the cleaner solution.

Hope that helps!

[bobm]

Thanks for the help, I'll give it a shot.

As a stop gap, I altered the Youtube profile to just allow the Streaming sub-category.  Seems to be working fine for now, but I'll play around with it trying to get more granular conrol.