Web Filter Alerts

[MMAT]

Hi everyone,

We are moving our School environment over to a Fortigate 100F with 5 year UTM - and after setting up our web filtering profiles, I am looking for a way to setup email notifications when certain categories are blocked.

For example, if a member of X group attempts to go to a website categorised as Adult content. When it is blocked, we would like an email to be sent detailing the user and the website.

Is this possible with the current licensing we have in place or do we need to look into alternatives like FortiAnalyzer? Is this even possible with FortiAnalyzer?

Any help is appreciated.

[sthampi_FTNT]

Hi Mmat,

Yes, this can be achieved by using Automation stitches in a Fortigate, action=send an email, trigger=webfilter violation. Following articles explain the same:

https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/526019/email-alerts

https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/733368/event-log-category-tr... 

Additionally, if you also have a FortiAnalyzer, alert emails can be sent from them too, by filtering a specific logid, explained more in the following articles;

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-configure-email-alerts-for-conf...

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Note-How-to-configure-email-alerts-for-con... 

[MMAT]

Brilliant thanks I will have a look. Is there a way using the Automation stitches to be more specific and only alert for certain categories or certain users at all?

[sthampi_FTNT · Accepted solution]

Hi Mmat, 
It is currently not possible to send an alert email for a 'specific category or users' using Automation stitch on the Fortigate. 

However, this can be achieved by using a FortiAnalyzer event handler, by following the steps mentioned in the previous comment.

If this answers your query, please mark the reply as an accepted solution.