Web Filter Issue

[Mes-Lili2]

I have a basic policy with web filter as below...    when I browse to the site listed as blocked it allows me out on the same policy.  perhaps I have missed something obvious here,... 

and here is the web filter

[dbu]

Hi @Mes-Lili2 ,

Have a look at these tips here :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-Static-URL-filter-actions-explai...

[dbu]

I just did a fresh config in the lab like this : 

Make sure you are matching the correct firewall policy!

[Mes-Lili2]

OK thanks for the example,   but what would you do if you just wanted that policy to allow access to only www.cheese.com, would you simply set  to allow.  this is what i have done for microsoft .com only but my test connection to my own website is using the  policy allows the traffic through. and the logs show the policy used.

[Mes-Lili2]

In your policy above, yes it will block www.cheese.com but it will also allow users to go to every other site...  and if you put a wildcard block below www.cheese it will block all users and prevent them getting to any websites allowed in policies further down...  or am i wrong??

[hbac]

Hi @Mes-Lili2,

Can you check webfilter logs and make sure the URL is matching the one you configured under static URL filter. 

Regards, 

[Mes-Lili2]

Where are the webfilter logs…”?”?

[hbac]

It depends on FortiOS version, you can check Log & Report -> Web Filter. Or Log & Report -> Security Events > Web Filter

[dbu]

Depending on the version, it either shows directly  Log & Report > Web filter or Log & Report > Security Events > Web filter

[Mes-Lili2]

Log report shows no option for web filter and security events shows “no results” in main window.